@highstate/k8s 0.9.36 → 0.10.0

package/dist/{chunk-FKJLPM3M.js → chunk-SY7FPT77.js}

@@ -1,5 +1,5 @@
-import { Secret } from './chunk-VMEJWYK2.js';
-import { getProvider, getNamespaceName } from './chunk-WGMJCZSK.js';
+import { Secret } from './chunk-LR6OTL6T.js';
+import { getProvider, getNamespaceName } from './chunk-UHWJ2GDK.js';
 import { ComponentResource, output, normalizeInputs, interpolate, toPromise } from '@highstate/pulumi';
 import { KubeConfig } from '@kubernetes/client-node';
 import { core, rbac } from '@pulumi/kubernetes';
@@ -164,5 +164,5 @@ var ClusterAccessScope = class _ClusterAccessScope extends ComponentResource {
 };
 
 export { ClusterAccessScope };
-//# sourceMappingURL=chunk-FKJLPM3M.js.map
-//# sourceMappingURL=chunk-FKJLPM3M.js.map
+//# sourceMappingURL=chunk-SY7FPT77.js.map
+//# sourceMappingURL=chunk-SY7FPT77.js.map

package/dist/{chunk-FKJLPM3M.js.map → chunk-SY7FPT77.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/rbac.ts"],"names":["serviceAccount","kubeconfig"],"mappings":";;;;;;;;AAqFO,IAAM,kBAAA,GAAN,MAAM,mBAAA,SAA2B,iBAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAI/C,OAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA8B,IAAA,EAAiC;AACvF,IAAA,KAAA,CAAM,kCAAA,EAAoC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAE1D,IAAA,MAAM,EAAE,cAAA,EAAgB,UAAA,EAAW,GAAI,MAAA,CAAO,KAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,KAAA,CAAM,CAAA,OAAA,KAAW;AACrF,MAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,MAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,IAAA,CAAK,SAAS,EAAE,QAAA,CAAS,IAAA;AAEtD,MAAA,MAAMA,eAAAA,GAAiB,IAAI,IAAA,CAAK,EAAA,CAAG,cAAA;AAAA,QACjC,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU;AAAA,YACR,IAAA;AAAA,YACA,SAAA,EAAW;AAAA;AACb,SACF;AAAA,QACA,EAAE,QAAA;AAAS,OACb;AAEA,MAAA,MAAM,WAAA,GAAc,IAAI,IAAA,CAAK,EAAA,CAAG,WAAA;AAAA,QAC9B,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU;AAAA,YACR,IAAA,EAAM,WAAA,CAAA,UAAA,EAAwB,aAAa,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAAA,YACnD,WAAA,EAAa;AAAA,cACX,2BAAA,EAA6B,WAAA,CAAA,6CAAA,EAA2D,IAAI,CAAA,oBAAA,EAAuB,aAAa,CAAA,EAAA;AAAA;AAClI,WACF;AAAA,UACA,KAAA,EAAO,eAAA,CAAgB,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK;AAAA,SAC9C;AAAA,QACA,EAAE,QAAA;AAAS,OACb;AAEA,MAAA,MAAM,iBAAA,GAAoB,CAAC,SAAA,KAA6B;AACtD,QAAA,OAAO,IAAI,KAAK,EAAA,CAAG,WAAA;AAAA,UACjB,IAAA;AAAA,UACA;AAAA,YACE,QAAA,EAAU,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,YAC5B,OAAA,EAAS;AAAA,cACP,IAAA,EAAM,aAAA;AAAA,cACN,IAAA,EAAM,YAAY,QAAA,CAAS,IAAA;AAAA,cAC3B,QAAA,EAAU;AAAA,aACZ;AAAA,YACA,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,IAAA,EAAM,gBAAA;AAAA,gBACN,IAAA,EAAMA,gBAAe,QAAA,CAAS,IAAA;AAAA,gBAC9B,SAAA,EAAW;AAAA;AACb;AACF,WACF;AAAA,UACA,EAAE,QAAA;AAAS,SACb;AAAA,MACF,CAAA;AAEA,MAAA,IAAI,IAAA,CAAK,wBAAwB,IAAA,EAAM;AACrC,QAAA,iBAAA,CAAkB,aAAa,CAAA;AAAA,MACjC;AAEA,MAAA,MAAA,CAAO,IAAA,CAAK,eAAA,IAAmB,EAAE,CAAA,CAC9B,KAAA,CAAM,GAAA,CAAI,gBAAgB,CAAC,CAAA,CAC3B,KAAA,CAAM,GAAA,CAAI,iBAAiB,CAAC,CAAA;AAE/B,MAAA,OAAO,EAAE,cAAA,EAAAA,eAAAA,EAAgB,UAAA,EAAY,QAAQ,UAAA,EAAW;AAAA,IAC1D,CAAC,CAAA;AAED,IAAA,MAAM,iBAAA,GAAoB,MAAA,CAAO,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,MAAA,CAAA,EAAU;AAAA,MACvD,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,IAAA,EAAM,qCAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,WAAA,EAAa;AAAA,UACX,oCAAA,EAAsC,eAAe,QAAA,CAAS;AAAA;AAChE;AACF,KACD,CAAA;AAED,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO;AAAA,MACpB,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA;AAAA,MAChC,UAAA;AAAA,MACA,QAAA,EAAU,iBAAA,CAAkB,QAAA,CAAS,OAAO,CAAA;AAAA,MAC5C,cAAA,EAAgB,eAAe,QAAA,CAAS;AAAA,KACzC,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,OAAA,EAAS,UAAA,EAAAC,WAAAA,EAAY,QAAA,EAAU,cAAA,EAAAD,eAAAA,EAAe,KAAM;AAC9D,MAAA,MAAM,MAAA,GAAS,IAAI,UAAA,EAAW;AAC9B,MAAA,MAAA,CAAO,eAAeC,WAAU,CAAA;AAGhC,MAAA,MAAA,CAAO,QAAQ,EAAC;AAChB,MAAA,MAAA,CAAO,WAAW,EAAC;AAEnB,MAAA,MAAA,CAAO,QAAQ,EAAE,IAAA,EAAMD,eAAAA,EAAgB,KAAA,EAAO,UAAU,CAAA;AAExD,MAAA,MAAA,CAAO,UAAA,CAAW;AAAA,QAChB,IAAA,EAAM,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,QACzB,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,QAC5B,IAAA,EAAMA;AAAA,OACP,CAAA;AAED,MAAA,MAAA,CAAO,iBAAA,CAAkB,MAAA,CAAO,QAAA,CAAS,CAAC,EAAE,IAAI,CAAA;AAEhD,MAAA,OAAO;AAAA,QACL,GAAG,OAAA;AAAA,QACH,YAAY,SAAA,CAAU,IAAA,CAAK,MAAM,MAAA,CAAO,YAAA,EAAc,CAAC;AAAA,OACzD;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAa,YAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,MAAM,SAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,KAAA;AAAA,QAAM,CAAA,SAAA,KAC3B,SAAA,CAAU,GAAA,CAAI,CAAA,CAAA,MAAM;AAAA,UAClB,WAAA,EAAa,CAAA,CAAE,SAAA,CAAU,QAAA,CAAS,GAAA;AAAA,UAClC,WAAW,CAAA,CAAE,SAAA;AAAA,UACb,UAAU,CAAA,CAAE,QAAA;AAAA,UACZ,YAAY,CAAA,CAAE,UAAA;AAAA,UACd,MAAM,CAAA,CAAE;AAAA,SACV,CAAE;AAAA;AACJ,KACF;AAEA,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,IAC1D;AAEA,IAAA,IAAI,MAAA,CAAO,SAAS,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,WAAW,CAAC,CAAA,CAAE,MAAA,GAAS,CAAA,EAAG;AACvD,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AAEA,IAAA,MAAM,aAAA,GAAgB,MAAM,SAAA,CAAU,MAAA,CAAO,KAAK,SAAS,CAAA,CAAE,SAAS,GAAG,CAAA;AAEzE,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,CAAE,WAAA,KAAgB,aAAA,EAAe;AAC7C,MAAA,MAAM,IAAI,MAAM,wEAAwE,CAAA;AAAA,IAC1F;AAEA,IAAA,IAAI,KAAK,gBAAA,EAAkB;AAEzB,MAAA,MAAM,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,EAAG,CAAA,CAAE,UAAU,CAAA,EAAA,EAAK,CAAA,CAAE,IAAI,CAAA,CAAE,CAAC,CAAA;AAE1E,MAAA,OAAO,IAAI,mBAAA;AAAA,QACT,IAAA;AAAA,QACA;AAAA,UACE,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,KAAA,EAAO,WAAA,CAAY,GAAA,CAAI,CAAA,CAAA,KAAK;AAC1B,YAAA,MAAM,CAAC,UAAA,EAAY,IAAI,CAAA,GAAI,CAAA,CAAE,MAAM,IAAI,CAAA;AAEvC,YAAA,OAAO;AAAA,cACL,SAAA,EAAW,UAAA,KAAe,IAAA,GAAO,CAAC,EAAE,CAAA,GAAI,CAAC,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,cACjE,WAAW,CAAC,CAAA,EAAG,IAAA,CAAK,WAAA,EAAa,CAAA,CAAA,CAAG,CAAA;AAAA,cACpC,OAAO,IAAA,CAAK;AAAA,aACd;AAAA,UACF,CAAC;AAAA,SACH;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,OAAO,IAAI,mBAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,CAAA,CAAA,MAAM;AAAA,UACxB,SAAA,EAAW,CAAA,CAAE,UAAA,KAAe,IAAA,GAAO,CAAC,EAAE,CAAA,GAAI,CAAC,CAAA,CAAE,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,UACrE,SAAA,EAAW,CAAC,CAAA,CAAE,IAAA,CAAK,WAAA,MAAiB,CAAA,CAAE,QAAA,EAAU,IAAA,GAAO,GAAA,GAAM,EAAA,CAAG,CAAA;AAAA,UAChE,aAAA,EAAe,EAAE,QAAA,EAAU,IAAA,GAAO,CAAC,CAAA,CAAE,QAAA,CAAS,IAAI,CAAA,GAAI,MAAA;AAAA,UACtD,OAAO,IAAA,CAAK;AAAA,SACd,CAAE;AAAA,OACJ;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF","file":"chunk-FKJLPM3M.js","sourcesContent":["import type { k8s } from \"@highstate/library\"\nimport type { Namespace } from \"./namespace\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type InputArray,\n  interpolate,\n  normalizeInputs,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { KubeConfig } from \"@kubernetes/client-node\"\nimport { core, rbac, type types } from \"@pulumi/kubernetes\"\nimport { map, unique } from \"remeda\"\nimport { stringify } from \"yaml\"\nimport { Secret } from \"./secret\"\nimport { getNamespaceName, getProvider, type NamespaceLike, type ScopedResource } from \"./shared\"\n\nexport type ClusterAccessScopeArgs = {\n  /**\n   * The namespace to locate the ServiceAccount in.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The RBAC rule to apply to the `ServiceAccount`.\n   *\n   * It will be used to create ClusterRole.\n   */\n  rule?: Input<types.input.rbac.v1.PolicyRule>\n\n  /**\n   * The RBAC rules to apply to the `ServiceAccount`.\n   *\n   * It will be used to create `ClusterRole`.\n   */\n  rules?: InputArray<types.input.rbac.v1.PolicyRule>\n\n  /**\n   * Whether to allow the `ServiceAccount` to access resources in the namespace where it is created.\n   *\n   * By default, it is set to `true`.\n   */\n  allowOriginNamespace?: boolean\n\n  /**\n   * The extra namespaces to bind to the `ClusterRole` and allow `ServiceAccount` to access them\n   * with specified `rules`.\n   */\n  extraNamespaces?: InputArray<NamespaceLike>\n\n  /**\n   * Whether to create `ClusterRoleBinding` to bind the `ServiceAccount` to the `ClusterRole`.\n   *\n   * This will allow the `ServiceAccount` to access all namespaces and cluster resources.\n   */\n  clusterWide?: boolean\n}\n\nexport type ClusterAccessScopeForResourcesArgs = {\n  /**\n   * The namespace to locate the `ServiceAccount` in.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The verbs to allow on the resources.\n   */\n  verbs: string[]\n\n  /**\n   * The resources to allow verbs on.\n   */\n  resources: InputArray<ScopedResource>\n\n  /**\n   * Whether to allow access on the whole collection rather than specific resources.\n   *\n   * The provided resources in this case will be used to determine the types and api groups only.\n   */\n  collectionAccess?: boolean\n}\n\nexport class ClusterAccessScope extends ComponentResource {\n  /**\n   * The cluster entity with the reduced access.\n   */\n  readonly cluster: Output<k8s.Cluster>\n\n  constructor(name: string, args: ClusterAccessScopeArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:k8s:ClusterAccessScope\", name, args, opts)\n\n    const { serviceAccount, kubeconfig } = output(args.namespace).cluster.apply(cluster => {\n      const provider = getProvider(cluster)\n      const namespaceName = output(args.namespace).metadata.name\n\n      const serviceAccount = new core.v1.ServiceAccount(\n        name,\n        {\n          metadata: {\n            name,\n            namespace: namespaceName,\n          },\n        },\n        { provider },\n      )\n\n      const clusterRole = new rbac.v1.ClusterRole(\n        name,\n        {\n          metadata: {\n            name: interpolate`highstate.${namespaceName}.${name}`,\n            annotations: {\n              \"kubernetes.io/description\": interpolate`Created by Highstate for the ServiceAccount \"${name}\" in the namespace \"${namespaceName}\".`,\n            },\n          },\n          rules: normalizeInputs(args.rule, args.rules),\n        },\n        { provider },\n      )\n\n      const createRoleBinding = (namespace: Input<string>) => {\n        return new rbac.v1.RoleBinding(\n          name,\n          {\n            metadata: { name, namespace },\n            roleRef: {\n              kind: \"ClusterRole\",\n              name: clusterRole.metadata.name,\n              apiGroup: \"rbac.authorization.k8s.io\",\n            },\n            subjects: [\n              {\n                kind: \"ServiceAccount\",\n                name: serviceAccount.metadata.name,\n                namespace: namespaceName,\n              },\n            ],\n          },\n          { provider },\n        )\n      }\n\n      if (args.allowOriginNamespace ?? true) {\n        createRoleBinding(namespaceName)\n      }\n\n      output(args.extraNamespaces ?? [])\n        .apply(map(getNamespaceName))\n        .apply(map(createRoleBinding))\n\n      return { serviceAccount, kubeconfig: cluster.kubeconfig }\n    })\n\n    const accessTokenSecret = Secret.create(`${name}-token`, {\n      namespace: args.namespace,\n      type: \"kubernetes.io/service-account-token\",\n      metadata: {\n        annotations: {\n          \"kubernetes.io/service-account.name\": serviceAccount.metadata.name,\n        },\n      },\n    })\n\n    this.cluster = output({\n      cluster: output(args.namespace).cluster,\n      kubeconfig,\n      newToken: accessTokenSecret.getValue(\"token\"),\n      serviceAccount: serviceAccount.metadata.name,\n    }).apply(({ cluster, kubeconfig, newToken, serviceAccount }) => {\n      const config = new KubeConfig()\n      config.loadFromString(kubeconfig)\n\n      // clear all existing contexts and users\n      config.users = []\n      config.contexts = []\n\n      config.addUser({ name: serviceAccount, token: newToken })\n\n      config.addContext({\n        name: config.clusters[0].name,\n        cluster: config.clusters[0].name,\n        user: serviceAccount,\n      })\n\n      config.setCurrentContext(config.clusters[0].name)\n\n      return {\n        ...cluster,\n        kubeconfig: stringify(JSON.parse(config.exportConfig())),\n      }\n    })\n  }\n\n  /**\n   * Creates `ClusterAccessScope` for the given resources with the specified verbs.\n   *\n   * All resources must belong to the same namespace in the same cluster.\n   *\n   * @param name The name of the resource and the ServiceAccount.\n   * @param resources The resources to create access scope for.\n   * @param verbs The verbs to allow on the resources.\n   */\n  static async forResources(\n    name: string,\n    args: ClusterAccessScopeForResourcesArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<ClusterAccessScope> {\n    const resolved = await toPromise(\n      output(args.resources).apply(resources =>\n        resources.map(r => ({\n          namespaceId: r.namespace.metadata.uid,\n          namespace: r.namespace,\n          metadata: r.metadata,\n          apiVersion: r.apiVersion,\n          kind: r.kind,\n        })),\n      ),\n    )\n\n    if (resolved.length === 0) {\n      throw new Error(\"No resources provided to forResources.\")\n    }\n\n    if (unique(resolved.map(r => r.namespaceId)).length > 1) {\n      throw new Error(\"All resources must belong to the same namespace.\")\n    }\n\n    const saNamespaceId = await toPromise(output(args.namespace).metadata.uid)\n\n    if (resolved[0].namespaceId !== saNamespaceId) {\n      throw new Error(\"The resources must belong to the same namespace as the ServiceAccount.\")\n    }\n\n    if (args.collectionAccess) {\n      // when collection access is requested, we only need to know the types and api groups\n      const uniqueTypes = unique(resolved.map(r => `${r.apiVersion}::${r.kind}`))\n\n      return new ClusterAccessScope(\n        name,\n        {\n          namespace: args.namespace,\n          rules: uniqueTypes.map(t => {\n            const [apiVersion, kind] = t.split(\"::\")\n\n            return {\n              apiGroups: apiVersion === \"v1\" ? [\"\"] : [apiVersion.split(\"/\")[0]],\n              resources: [`${kind.toLowerCase()}s`],\n              verbs: args.verbs,\n            }\n          }),\n        },\n        opts,\n      )\n    }\n\n    return new ClusterAccessScope(\n      name,\n      {\n        namespace: args.namespace,\n        rules: resolved.map(r => ({\n          apiGroups: r.apiVersion === \"v1\" ? [\"\"] : [r.apiVersion.split(\"/\")[0]],\n          resources: [r.kind.toLowerCase() + (r.metadata?.name ? \"s\" : \"\")],\n          resourceNames: r.metadata?.name ? [r.metadata.name] : undefined,\n          verbs: args.verbs,\n        })),\n      },\n      opts,\n    )\n  }\n}\n"]}
+{"version":3,"sources":["../src/rbac.ts"],"names":["serviceAccount","kubeconfig"],"mappings":";;;;;;;;AAqFO,IAAM,kBAAA,GAAN,MAAM,mBAAA,SAA2B,iBAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAI/C,OAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA8B,IAAA,EAAiC;AACvF,IAAA,KAAA,CAAM,kCAAA,EAAoC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAE1D,IAAA,MAAM,EAAE,cAAA,EAAgB,UAAA,EAAW,GAAI,MAAA,CAAO,KAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,KAAA,CAAM,CAAA,OAAA,KAAW;AACrF,MAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,MAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,IAAA,CAAK,SAAS,EAAE,QAAA,CAAS,IAAA;AAEtD,MAAA,MAAMA,eAAAA,GAAiB,IAAI,IAAA,CAAK,EAAA,CAAG,cAAA;AAAA,QACjC,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU;AAAA,YACR,IAAA;AAAA,YACA,SAAA,EAAW;AAAA;AACb,SACF;AAAA,QACA,EAAE,QAAA;AAAS,OACb;AAEA,MAAA,MAAM,WAAA,GAAc,IAAI,IAAA,CAAK,EAAA,CAAG,WAAA;AAAA,QAC9B,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU;AAAA,YACR,IAAA,EAAM,WAAA,CAAA,UAAA,EAAwB,aAAa,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAAA,YACnD,WAAA,EAAa;AAAA,cACX,2BAAA,EAA6B,WAAA,CAAA,6CAAA,EAA2D,IAAI,CAAA,oBAAA,EAAuB,aAAa,CAAA,EAAA;AAAA;AAClI,WACF;AAAA,UACA,KAAA,EAAO,eAAA,CAAgB,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK;AAAA,SAC9C;AAAA,QACA,EAAE,QAAA;AAAS,OACb;AAEA,MAAA,MAAM,iBAAA,GAAoB,CAAC,SAAA,KAA6B;AACtD,QAAA,OAAO,IAAI,KAAK,EAAA,CAAG,WAAA;AAAA,UACjB,IAAA;AAAA,UACA;AAAA,YACE,QAAA,EAAU,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,YAC5B,OAAA,EAAS;AAAA,cACP,IAAA,EAAM,aAAA;AAAA,cACN,IAAA,EAAM,YAAY,QAAA,CAAS,IAAA;AAAA,cAC3B,QAAA,EAAU;AAAA,aACZ;AAAA,YACA,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,IAAA,EAAM,gBAAA;AAAA,gBACN,IAAA,EAAMA,gBAAe,QAAA,CAAS,IAAA;AAAA,gBAC9B,SAAA,EAAW;AAAA;AACb;AACF,WACF;AAAA,UACA,EAAE,QAAA;AAAS,SACb;AAAA,MACF,CAAA;AAEA,MAAA,IAAI,IAAA,CAAK,wBAAwB,IAAA,EAAM;AACrC,QAAA,iBAAA,CAAkB,aAAa,CAAA;AAAA,MACjC;AAEA,MAAA,MAAA,CAAO,IAAA,CAAK,eAAA,IAAmB,EAAE,CAAA,CAC9B,KAAA,CAAM,GAAA,CAAI,gBAAgB,CAAC,CAAA,CAC3B,KAAA,CAAM,GAAA,CAAI,iBAAiB,CAAC,CAAA;AAE/B,MAAA,OAAO,EAAE,cAAA,EAAAA,eAAAA,EAAgB,UAAA,EAAY,QAAQ,UAAA,EAAW;AAAA,IAC1D,CAAC,CAAA;AAED,IAAA,MAAM,iBAAA,GAAoB,MAAA,CAAO,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,MAAA,CAAA,EAAU;AAAA,MACvD,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,IAAA,EAAM,qCAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,WAAA,EAAa;AAAA,UACX,oCAAA,EAAsC,eAAe,QAAA,CAAS;AAAA;AAChE;AACF,KACD,CAAA;AAED,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO;AAAA,MACpB,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA;AAAA,MAChC,UAAA;AAAA,MACA,QAAA,EAAU,iBAAA,CAAkB,QAAA,CAAS,OAAO,CAAA;AAAA,MAC5C,cAAA,EAAgB,eAAe,QAAA,CAAS;AAAA,KACzC,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,OAAA,EAAS,UAAA,EAAAC,WAAAA,EAAY,QAAA,EAAU,cAAA,EAAAD,eAAAA,EAAe,KAAM;AAC9D,MAAA,MAAM,MAAA,GAAS,IAAI,UAAA,EAAW;AAC9B,MAAA,MAAA,CAAO,eAAeC,WAAU,CAAA;AAGhC,MAAA,MAAA,CAAO,QAAQ,EAAC;AAChB,MAAA,MAAA,CAAO,WAAW,EAAC;AAEnB,MAAA,MAAA,CAAO,QAAQ,EAAE,IAAA,EAAMD,eAAAA,EAAgB,KAAA,EAAO,UAAU,CAAA;AAExD,MAAA,MAAA,CAAO,UAAA,CAAW;AAAA,QAChB,IAAA,EAAM,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,QACzB,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,QAC5B,IAAA,EAAMA;AAAA,OACP,CAAA;AAED,MAAA,MAAA,CAAO,iBAAA,CAAkB,MAAA,CAAO,QAAA,CAAS,CAAC,EAAE,IAAI,CAAA;AAEhD,MAAA,OAAO;AAAA,QACL,GAAG,OAAA;AAAA,QACH,YAAY,SAAA,CAAU,IAAA,CAAK,MAAM,MAAA,CAAO,YAAA,EAAc,CAAC;AAAA,OACzD;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAa,YAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,MAAM,SAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,KAAA;AAAA,QAAM,CAAA,SAAA,KAC3B,SAAA,CAAU,GAAA,CAAI,CAAA,CAAA,MAAM;AAAA,UAClB,WAAA,EAAa,CAAA,CAAE,SAAA,CAAU,QAAA,CAAS,GAAA;AAAA,UAClC,WAAW,CAAA,CAAE,SAAA;AAAA,UACb,UAAU,CAAA,CAAE,QAAA;AAAA,UACZ,YAAY,CAAA,CAAE,UAAA;AAAA,UACd,MAAM,CAAA,CAAE;AAAA,SACV,CAAE;AAAA;AACJ,KACF;AAEA,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,IAC1D;AAEA,IAAA,IAAI,MAAA,CAAO,SAAS,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,WAAW,CAAC,CAAA,CAAE,MAAA,GAAS,CAAA,EAAG;AACvD,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AAEA,IAAA,MAAM,aAAA,GAAgB,MAAM,SAAA,CAAU,MAAA,CAAO,KAAK,SAAS,CAAA,CAAE,SAAS,GAAG,CAAA;AAEzE,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,CAAE,WAAA,KAAgB,aAAA,EAAe;AAC7C,MAAA,MAAM,IAAI,MAAM,wEAAwE,CAAA;AAAA,IAC1F;AAEA,IAAA,IAAI,KAAK,gBAAA,EAAkB;AAEzB,MAAA,MAAM,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,EAAG,CAAA,CAAE,UAAU,CAAA,EAAA,EAAK,CAAA,CAAE,IAAI,CAAA,CAAE,CAAC,CAAA;AAE1E,MAAA,OAAO,IAAI,mBAAA;AAAA,QACT,IAAA;AAAA,QACA;AAAA,UACE,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,KAAA,EAAO,WAAA,CAAY,GAAA,CAAI,CAAA,CAAA,KAAK;AAC1B,YAAA,MAAM,CAAC,UAAA,EAAY,IAAI,CAAA,GAAI,CAAA,CAAE,MAAM,IAAI,CAAA;AAEvC,YAAA,OAAO;AAAA,cACL,SAAA,EAAW,UAAA,KAAe,IAAA,GAAO,CAAC,EAAE,CAAA,GAAI,CAAC,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,cACjE,WAAW,CAAC,CAAA,EAAG,IAAA,CAAK,WAAA,EAAa,CAAA,CAAA,CAAG,CAAA;AAAA,cACpC,OAAO,IAAA,CAAK;AAAA,aACd;AAAA,UACF,CAAC;AAAA,SACH;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,OAAO,IAAI,mBAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,CAAA,CAAA,MAAM;AAAA,UACxB,SAAA,EAAW,CAAA,CAAE,UAAA,KAAe,IAAA,GAAO,CAAC,EAAE,CAAA,GAAI,CAAC,CAAA,CAAE,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,UACrE,SAAA,EAAW,CAAC,CAAA,CAAE,IAAA,CAAK,WAAA,MAAiB,CAAA,CAAE,QAAA,EAAU,IAAA,GAAO,GAAA,GAAM,EAAA,CAAG,CAAA;AAAA,UAChE,aAAA,EAAe,EAAE,QAAA,EAAU,IAAA,GAAO,CAAC,CAAA,CAAE,QAAA,CAAS,IAAI,CAAA,GAAI,MAAA;AAAA,UACtD,OAAO,IAAA,CAAK;AAAA,SACd,CAAE;AAAA,OACJ;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF","file":"chunk-SY7FPT77.js","sourcesContent":["import type { k8s } from \"@highstate/library\"\nimport type { Namespace } from \"./namespace\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type InputArray,\n  interpolate,\n  normalizeInputs,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { KubeConfig } from \"@kubernetes/client-node\"\nimport { core, rbac, type types } from \"@pulumi/kubernetes\"\nimport { map, unique } from \"remeda\"\nimport { stringify } from \"yaml\"\nimport { Secret } from \"./secret\"\nimport { getNamespaceName, getProvider, type NamespaceLike, type ScopedResource } from \"./shared\"\n\nexport type ClusterAccessScopeArgs = {\n  /**\n   * The namespace to locate the ServiceAccount in.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The RBAC rule to apply to the `ServiceAccount`.\n   *\n   * It will be used to create ClusterRole.\n   */\n  rule?: Input<types.input.rbac.v1.PolicyRule>\n\n  /**\n   * The RBAC rules to apply to the `ServiceAccount`.\n   *\n   * It will be used to create `ClusterRole`.\n   */\n  rules?: InputArray<types.input.rbac.v1.PolicyRule>\n\n  /**\n   * Whether to allow the `ServiceAccount` to access resources in the namespace where it is created.\n   *\n   * By default, it is set to `true`.\n   */\n  allowOriginNamespace?: boolean\n\n  /**\n   * The extra namespaces to bind to the `ClusterRole` and allow `ServiceAccount` to access them\n   * with specified `rules`.\n   */\n  extraNamespaces?: InputArray<NamespaceLike>\n\n  /**\n   * Whether to create `ClusterRoleBinding` to bind the `ServiceAccount` to the `ClusterRole`.\n   *\n   * This will allow the `ServiceAccount` to access all namespaces and cluster resources.\n   */\n  clusterWide?: boolean\n}\n\nexport type ClusterAccessScopeForResourcesArgs = {\n  /**\n   * The namespace to locate the `ServiceAccount` in.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The verbs to allow on the resources.\n   */\n  verbs: string[]\n\n  /**\n   * The resources to allow verbs on.\n   */\n  resources: InputArray<ScopedResource>\n\n  /**\n   * Whether to allow access on the whole collection rather than specific resources.\n   *\n   * The provided resources in this case will be used to determine the types and api groups only.\n   */\n  collectionAccess?: boolean\n}\n\nexport class ClusterAccessScope extends ComponentResource {\n  /**\n   * The cluster entity with the reduced access.\n   */\n  readonly cluster: Output<k8s.Cluster>\n\n  constructor(name: string, args: ClusterAccessScopeArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:k8s:ClusterAccessScope\", name, args, opts)\n\n    const { serviceAccount, kubeconfig } = output(args.namespace).cluster.apply(cluster => {\n      const provider = getProvider(cluster)\n      const namespaceName = output(args.namespace).metadata.name\n\n      const serviceAccount = new core.v1.ServiceAccount(\n        name,\n        {\n          metadata: {\n            name,\n            namespace: namespaceName,\n          },\n        },\n        { provider },\n      )\n\n      const clusterRole = new rbac.v1.ClusterRole(\n        name,\n        {\n          metadata: {\n            name: interpolate`highstate.${namespaceName}.${name}`,\n            annotations: {\n              \"kubernetes.io/description\": interpolate`Created by Highstate for the ServiceAccount \"${name}\" in the namespace \"${namespaceName}\".`,\n            },\n          },\n          rules: normalizeInputs(args.rule, args.rules),\n        },\n        { provider },\n      )\n\n      const createRoleBinding = (namespace: Input<string>) => {\n        return new rbac.v1.RoleBinding(\n          name,\n          {\n            metadata: { name, namespace },\n            roleRef: {\n              kind: \"ClusterRole\",\n              name: clusterRole.metadata.name,\n              apiGroup: \"rbac.authorization.k8s.io\",\n            },\n            subjects: [\n              {\n                kind: \"ServiceAccount\",\n                name: serviceAccount.metadata.name,\n                namespace: namespaceName,\n              },\n            ],\n          },\n          { provider },\n        )\n      }\n\n      if (args.allowOriginNamespace ?? true) {\n        createRoleBinding(namespaceName)\n      }\n\n      output(args.extraNamespaces ?? [])\n        .apply(map(getNamespaceName))\n        .apply(map(createRoleBinding))\n\n      return { serviceAccount, kubeconfig: cluster.kubeconfig }\n    })\n\n    const accessTokenSecret = Secret.create(`${name}-token`, {\n      namespace: args.namespace,\n      type: \"kubernetes.io/service-account-token\",\n      metadata: {\n        annotations: {\n          \"kubernetes.io/service-account.name\": serviceAccount.metadata.name,\n        },\n      },\n    })\n\n    this.cluster = output({\n      cluster: output(args.namespace).cluster,\n      kubeconfig,\n      newToken: accessTokenSecret.getValue(\"token\"),\n      serviceAccount: serviceAccount.metadata.name,\n    }).apply(({ cluster, kubeconfig, newToken, serviceAccount }) => {\n      const config = new KubeConfig()\n      config.loadFromString(kubeconfig)\n\n      // clear all existing contexts and users\n      config.users = []\n      config.contexts = []\n\n      config.addUser({ name: serviceAccount, token: newToken })\n\n      config.addContext({\n        name: config.clusters[0].name,\n        cluster: config.clusters[0].name,\n        user: serviceAccount,\n      })\n\n      config.setCurrentContext(config.clusters[0].name)\n\n      return {\n        ...cluster,\n        kubeconfig: stringify(JSON.parse(config.exportConfig())),\n      }\n    })\n  }\n\n  /**\n   * Creates `ClusterAccessScope` for the given resources with the specified verbs.\n   *\n   * All resources must belong to the same namespace in the same cluster.\n   *\n   * @param name The name of the resource and the ServiceAccount.\n   * @param resources The resources to create access scope for.\n   * @param verbs The verbs to allow on the resources.\n   */\n  static async forResources(\n    name: string,\n    args: ClusterAccessScopeForResourcesArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<ClusterAccessScope> {\n    const resolved = await toPromise(\n      output(args.resources).apply(resources =>\n        resources.map(r => ({\n          namespaceId: r.namespace.metadata.uid,\n          namespace: r.namespace,\n          metadata: r.metadata,\n          apiVersion: r.apiVersion,\n          kind: r.kind,\n        })),\n      ),\n    )\n\n    if (resolved.length === 0) {\n      throw new Error(\"No resources provided to forResources.\")\n    }\n\n    if (unique(resolved.map(r => r.namespaceId)).length > 1) {\n      throw new Error(\"All resources must belong to the same namespace.\")\n    }\n\n    const saNamespaceId = await toPromise(output(args.namespace).metadata.uid)\n\n    if (resolved[0].namespaceId !== saNamespaceId) {\n      throw new Error(\"The resources must belong to the same namespace as the ServiceAccount.\")\n    }\n\n    if (args.collectionAccess) {\n      // when collection access is requested, we only need to know the types and api groups\n      const uniqueTypes = unique(resolved.map(r => `${r.apiVersion}::${r.kind}`))\n\n      return new ClusterAccessScope(\n        name,\n        {\n          namespace: args.namespace,\n          rules: uniqueTypes.map(t => {\n            const [apiVersion, kind] = t.split(\"::\")\n\n            return {\n              apiGroups: apiVersion === \"v1\" ? [\"\"] : [apiVersion.split(\"/\")[0]],\n              resources: [`${kind.toLowerCase()}s`],\n              verbs: args.verbs,\n            }\n          }),\n        },\n        opts,\n      )\n    }\n\n    return new ClusterAccessScope(\n      name,\n      {\n        namespace: args.namespace,\n        rules: resolved.map(r => ({\n          apiGroups: r.apiVersion === \"v1\" ? [\"\"] : [r.apiVersion.split(\"/\")[0]],\n          resources: [r.kind.toLowerCase() + (r.metadata?.name ? \"s\" : \"\")],\n          resourceNames: r.metadata?.name ? [r.metadata.name] : undefined,\n          verbs: args.verbs,\n        })),\n      },\n      opts,\n    )\n  }\n}\n"]}

package/dist/{chunk-WGMJCZSK.js → chunk-UHWJ2GDK.js}

@@ -9,21 +9,21 @@ var images_exports = {};
 __export(images_exports, {
   default: () => images_default,
   "terminal-kubectl": () => terminal_kubectl,
-  "worker-k8s-monitor": () => worker_k8s_monitor
+  "worker.k8s-monitor": () => worker_k8s_monitor
 });
 var terminal_kubectl = {
-  name: "ghcr.io/exeteres/highstate/terminal-kubectl",
+  name: "ghcr.io/highstate-io/highstate/terminal.kubectl",
   tag: "latest",
-  image: "ghcr.io/exeteres/highstate/terminal-kubectl:latest@sha256:2cd011119f6098d41b5bb377420f0106577d3b289ae4fc7982b4578b23c82ef4"
+  image: "ghcr.io/highstate-io/highstate/terminal.kubectl:latest@sha256:2cd011119f6098d41b5bb377420f0106577d3b289ae4fc7982b4578b23c82ef4"
 };
 var worker_k8s_monitor = {
-  name: "ghcr.io/exeteres/highstate/worker-k8s-monitor",
+  name: "ghcr.io/highstate-io/highstate/worker.k8s-monitor",
   tag: "latest",
-  image: "ghcr.io/exeteres/highstate/worker-k8s-monitor:latest@sha256:66b985a97925d39a4c6e2b15cbeefadaadfce0cb4d6e5df8881cca85281383d5"
+  image: "ghcr.io/highstate-io/highstate/worker.k8s-monitor:latest@sha256:66b985a97925d39a4c6e2b15cbeefadaadfce0cb4d6e5df8881cca85281383d5"
 };
 var images_default = {
   "terminal-kubectl": terminal_kubectl,
-  "worker-k8s-monitor": worker_k8s_monitor
+  "worker.k8s-monitor": worker_k8s_monitor
 };
 var providers = /* @__PURE__ */ new Map();
 function getProvider(cluster) {
@@ -356,5 +356,5 @@ var WrappedNamespace = class extends Namespace {
 };
 
 export { Namespace, ScopedResource, commonExtraArgs, getNamespaceName, getProvider, getProviderAsync, images_exports, mapMetadata, mapNamespaceNameToSelector, mapSelectorLikeToSelector, validateCluster };
-//# sourceMappingURL=chunk-WGMJCZSK.js.map
-//# sourceMappingURL=chunk-WGMJCZSK.js.map
+//# sourceMappingURL=chunk-UHWJ2GDK.js.map
+//# sourceMappingURL=chunk-UHWJ2GDK.js.map

package/dist/chunk-UHWJ2GDK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../assets/images.json","../src/shared.ts","../src/namespace.ts"],"names":["terminal-kubectl","worker.k8s-monitor","entity","cluster","ComponentResource","output","toPromise","core"],"mappings":";;;;;;;AAAA,IAAA,cAAA,GAAA;AAAA,QAAA,CAAA,cAAA,EAAA;AAAA,EAAA,OAAA,EAAA,MAAA,cAAA;AAAA,EAAA,kBAAA,EAAA,MAAAA,gBAAAA;AAAA,EAAA,oBAAA,EAAA,MAAAC;AAAA,CAAA,CAAA;AACE,IAAAD,gBAAAA,GAAoB;AAAA,EAClB,IAAA,EAAQ,iDAAA;AAAA,EACR,GAAA,EAAO,QAAA;AAAA,EACP,KAAA,EAAS;AACX,CAAA;AACA,IAAAC,kBAAAA,GAAsB;AAAA,EACpB,IAAA,EAAQ,mDAAA;AAAA,EACR,GAAA,EAAO,QAAA;AAAA,EACP,KAAA,EAAS;AACX,CAAA;AAVF,IAAA,cAAA,GAAA;AAAA,EACE,kBAAA,EAAAD,gBAAAA;AAAA,EAKA,oBAAA,EAAAC;AAKF,CAAA;ACMA,IAAM,SAAA,uBAAgB,GAAA,EAAqC;AAEpD,SAAS,YAAY,OAAA,EAAgC;AAC1D,EAAA,MAAM,OAAO,CAAA,EAAG,OAAA,CAAQ,IAAI,CAAA,CAAA,EAAI,QAAQ,YAAY,CAAA,CAAA;AACpD,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AACnC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,YAAY,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,EAAG,CAAA;AAC9E,EAAA,SAAA,CAAU,GAAA,CAAI,MAAM,QAAQ,CAAA;AAE5B,EAAA,OAAO,QAAA;AACT;AAEA,eAAsB,iBAAiB,OAAA,EAAgD;AACrF,EAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,OAAO,CAAA;AAE/C,EAAA,OAAO,YAAY,eAAe,CAAA;AACpC;AAqBO,IAAM,eAAA,GAAkB,CAAC,MAAA,EAAQ,WAAA,EAAa,UAAU;AAExD,SAAS,WAAA,CACd,MACA,YAAA,EACgD;AAChD,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,CAAE,KAAA;AAAA,IAAM,cACjC,MAAA,CAAO;AAAA,MACL,GAAG,QAAA;AAAA,MACH,IAAA,EAAM,IAAA,CAAK,IAAA,IAAQ,QAAA,EAAU,IAAA,IAAQ,YAAA;AAAA,MACrC,SAAA,EACE,QAAA,EAAU,SAAA,KAAc,IAAA,CAAK,SAAA,GAAY,OAAO,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,CAAS,IAAA,GAAO,MAAA;AAAA,KACnF;AAAA,GACH;AACF;AAIO,SAAS,0BACd,QAAA,EACmC;AACnC,EAAA,IAAI,aAAA,IAAiB,QAAA,IAAY,kBAAA,IAAsB,QAAA,EAAU;AAC/D,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,GACf;AACF;AAEO,SAAS,iBAAiB,SAAA,EAA0C;AACzE,EAAA,IAAI,SAAA,CAAU,UAAA,CAAW,SAAS,CAAA,EAAG;AACnC,IAAA,OAAO,UAAU,QAAA,CAAS,IAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,IAAA,CAAK,EAAA,CAAG,SAAA,CAAU,UAAA,CAAW,SAAS,CAAA,EAAG;AAC3C,IAAA,OAAO,UAAU,QAAA,CAAS,IAAA;AAAA,EAC5B;AAEA,EAAA,OAAO,OAAO,SAAS,CAAA;AACzB;AAEO,SAAS,2BACd,SAAA,EACmC;AACnC,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,MACX,6BAAA,EAA+B;AAAA;AACjC,GACF;AACF;AAEO,SAAS,eAAA,CACd,QACA,OAAA,EACoB;AACpB,EAAA,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAAC,OAAAA,EAAQ,OAAA,EAAAC,UAAQ,KAAM;AAChE,IAAA,IAAID,OAAAA,CAAO,SAAA,KAAcC,QAAAA,CAAQ,EAAA,EAAI;AACnC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qBAAA,EAAwBD,OAAAA,CAAO,IAAI,CAAA,EAAA,EAAKA,OAAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAA,EAAOA,OAAAA,CAAO,SAAS,CAAA,MAAA,EAASC,QAAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,OACxG;AAAA,IACF;AAEA,IAAA,OAAOA,QAAAA;AAAA,EACT,CAAC,CAAA;AACH;AASO,IAAe,cAAA,GAAf,cAAsC,iBAAA,CAAkB;AAAA,EACnD,WAAA,CACR,MACA,IAAA,EACA,IAAA,EACA,MAKS,UAAA,EAKA,IAAA,EAKA,WAKA,QAAA,EACT;AACA,IAAA,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAjBnB,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAKA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAKA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,OAAA,GAA+B;AACjC,IAAA,OAAO,KAAK,SAAA,CAAU,OAAA;AAAA,EACxB;AAMF;;;ACnIO,IAAe,SAAA,GAAf,MAAe,UAAA,SAAkBC,mBAAAA,CAAkB;AAAA,EACxD,WAAA,CACE,MACA,IAAA,EACA,IAAA,EACA,MAKS,OAAA,EAKA,QAAA,EAKA,MAKA,MAAA,EACT;AACA,IAAA,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAjBnB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAKA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAKA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAAgC;AAClC,IAAA,OAAOC,QAAAA,CAAO;AAAA,MACZ,IAAA,EAAM,WAAA;AAAA,MACN,SAAA,EAAW,KAAK,OAAA,CAAQ,EAAA;AAAA,MACxB,WAAA,EAAa,KAAK,OAAA,CAAQ,IAAA;AAAA,MAC1B,UAAU,IAAA,CAAK;AAAA,KAChB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAqB,IAAA,EAA4C;AAC3F,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,WAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EACoB;AACpB,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,UAAA,CAAU,gBAAA,CAAiB,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO,CAAA;AAAA,IACrE;AAEA,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,UAAA,CAAU,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO,CAAA;AAAA,IAC7D;AAEA,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,eAAe,IAAA,EAAM;AAAA,QAC9B,GAAG,IAAA;AAAA,QACH,IAAA,EAAMA,QAAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,SAAA;AAAA,QACrC,OAAA,EAAS,eAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,OACrD,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,eAAe,IAAA,EAAM;AAAA,QAC9B,GAAG,IAAA;AAAA,QACH,IAAA,EAAMA,QAAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,IAAA;AAAA,QACrC,OAAA,EAAS,eAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,OACrD,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAqB,IAAA,EAA4C;AAC1F,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,GAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,OAAO,IAAI,iBAAA,CAAkB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,OAAwB,cAAA,mBAAiB,IAAI,GAAA,EAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAapE,OAAO,GAAA,CAAI,MAAA,EAAuB,OAAA,EAAwC;AACxE,IAAA,OAAO,WAAA;AAAA,MACL,UAAA,CAAU,cAAA;AAAA,MACV,CAAA,EAAG,OAAO,WAAW,CAAA,CAAA,EAAI,OAAO,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,MAAA,CAAO,SAAS,CAAA,CAAA;AAAA,MACjE,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,UAAA,CAAU,IAAI,IAAA,EAAM;AAAA,UACzB,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,OAAA,EAAS,eAAA,CAAgB,MAAA,EAAQ,OAAO;AAAA,SACzC,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,QAAA,CACX,MAAA,EACA,OAAA,EACoB;AACpB,IAAA,MAAM,cAAA,GAAiB,MAAMC,SAAAA,CAAU,MAAM,CAAA;AAE7C,IAAA,OAAO,UAAA,CAAU,GAAA,CAAI,cAAA,EAAgB,OAAO,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,OAAO,WAAA,CAAY,QAAA,EAA8B,OAAA,EAAwC;AACvF,IAAA,OAAO,WAAA;AAAA,MACL,UAAA,CAAU,cAAA;AAAA,MACV,CAAA,EAAG,SAAS,WAAW,CAAA,CAAA,EAAI,SAAS,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,QAAA,CAAS,SAAS,CAAA,CAAA;AAAA,MAC5E,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,UAAA,CAAU,IAAI,IAAA,EAAM;AAAA,UACzB,IAAA,EAAM,SAAS,QAAA,CAAS,SAAA;AAAA,UACxB,OAAA,EAAS,eAAA,CAAgB,QAAA,EAAU,OAAO;AAAA,SAC3C,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,gBAAA,CACX,QAAA,EACA,OAAA,EACoB;AACpB,IAAA,MAAM,gBAAA,GAAmB,MAAMA,SAAAA,CAAU,QAAQ,CAAA;AAEjD,IAAA,OAAO,UAAA,CAAU,WAAA,CAAY,gBAAA,EAAkB,OAAO,CAAA;AAAA,EACxD;AACF;AAEA,SAAS,oBAAA,CACP,MACA,YAAA,EACgD;AAChD,EAAA,OAAO,WAAA,CAAY,IAAA,EAAM,YAAY,CAAA,CAAE,MAAM,CAAA,QAAA,KAAY;AACvD,IAAA,IAAI,KAAK,UAAA,EAAY;AACnB,MAAA,QAAA,CAAS,MAAA,GAAS;AAAA,QAChB,GAAG,QAAA,CAAS,MAAA;AAAA,QACZ,oCAAA,EAAsC;AAAA,OACxC;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT,CAAC,CAAA;AACH;AAEA,IAAM,gBAAA,GAAN,cAA+B,SAAA,CAAU;AAAA,EACvC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAiC;AAC9E,IAAA,MAAM,YAAYD,QAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAM,CAAA,OAAA,KAAW;AACtD,MAAA,OAAO,IAAIE,KAAK,EAAA,CAAG,SAAA;AAAA,QACjB,IAAA;AAAA,QACA,EAAE,QAAA,EAAU,oBAAA,CAAqB,IAAA,EAAM,IAAI,CAAA,EAAE;AAAA,QAC7C,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,yBAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAF,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AAEA,IAAM,cAAA,GAAN,cAA6B,SAAA,CAAU;AAAA,EACrC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAiC;AAC9E,IAAA,MAAM,YAAYA,QAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAM,CAAA,OAAA,KAAW;AACtD,MAAA,OAAO,IAAIE,KAAK,EAAA,CAAG,cAAA;AAAA,QACjB,IAAA;AAAA,QACA,EAAE,QAAA,EAAU,oBAAA,CAAqB,IAAA,EAAM,IAAI,CAAA,EAAE;AAAA,QAC7C,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,8BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAF,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AA0BA,IAAM,iBAAA,GAAN,cAAgC,SAAA,CAAU;AAAA,EACxC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA6B,IAAA,EAAiC;AACtF,IAAA,MAAM,YAAYA,QAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAM,CAAA,OAAA,KAAW;AACtD,MAAA,OAAOE,KAAK,EAAA,CAAG,SAAA,CAAU,GAAA,CAAI,IAAA,EAAM,KAAK,IAAA,EAAM;AAAA,QAC5C,GAAG,IAAA;AAAA,QACH,MAAA,EAAQ,IAAA;AAAA,QACR,QAAA,EAAU,YAAY,OAAO;AAAA,OAC9B,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,iCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAF,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AAEA,IAAM,gBAAA,GAAN,cAA+B,SAAA,CAAU;AAAA,EACvC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA4B,IAAA,EAAiC;AACrF,IAAA,KAAA;AAAA,MACE,gCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEAA,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnBA,QAAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA;AAAA,MACvBA,QAAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,IAAA;AAAA,MACvBA,QAAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE;AAAA,KACzB;AAAA,EACF;AACF,CAAA","file":"chunk-UHWJ2GDK.js","sourcesContent":["{\n  \"terminal-kubectl\": {\n    \"name\": \"ghcr.io/highstate-io/highstate/terminal.kubectl\",\n    \"tag\": \"latest\",\n    \"image\": \"ghcr.io/highstate-io/highstate/terminal.kubectl:latest@sha256:2cd011119f6098d41b5bb377420f0106577d3b289ae4fc7982b4578b23c82ef4\"\n  },\n  \"worker.k8s-monitor\": {\n    \"name\": \"ghcr.io/highstate-io/highstate/worker.k8s-monitor\",\n    \"tag\": \"latest\",\n    \"image\": \"ghcr.io/highstate-io/highstate/worker.k8s-monitor:latest@sha256:66b985a97925d39a4c6e2b15cbeefadaadfce0cb4d6e5df8881cca85281383d5\"\n  }\n}\n","import type { PartialKeys } from \"@highstate/contract\"\nimport type { k8s } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  type Output,\n  output,\n  secret,\n  toPromise,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { core, Provider, type types } from \"@pulumi/kubernetes\"\nimport * as images from \"../assets/images.json\"\nimport { Namespace } from \"./namespace\"\n\nconst providers = new Map<`${string}.${string}`, Provider>()\n\nexport function getProvider(cluster: k8s.Cluster): Provider {\n  const name = `${cluster.name}.${cluster.connectionId}` as const\n  const existing = providers.get(name)\n  if (existing) {\n    return existing\n  }\n\n  const provider = new Provider(name, { kubeconfig: secret(cluster.kubeconfig) })\n  providers.set(name, provider)\n\n  return provider\n}\n\nexport async function getProviderAsync(cluster: Input<k8s.Cluster>): Promise<Provider> {\n  const resolvedCluster = await toPromise(cluster)\n\n  return getProvider(resolvedCluster)\n}\n\nexport type NamespaceLike = core.v1.Namespace | Namespace | string\n\nexport type ScopedResourceArgs = {\n  /**\n   * The name of the resource.\n   */\n  name?: Input<string>\n\n  /**\n   * The namespace to create the resource in.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The metadata to apply to the resource.\n   */\n  metadata?: Input<types.input.meta.v1.ObjectMeta>\n}\n\nexport const commonExtraArgs = [\"name\", \"namespace\", \"metadata\"] as const\n\nexport function mapMetadata(\n  args: PartialKeys<ScopedResourceArgs, \"namespace\">,\n  fallbackName?: string,\n): Output<Unwrap<types.input.meta.v1.ObjectMeta>> {\n  return output(args.metadata).apply(metadata =>\n    output({\n      ...metadata,\n      name: args.name ?? metadata?.name ?? fallbackName,\n      namespace:\n        metadata?.namespace ?? (args.namespace ? output(args.namespace).metadata.name : undefined),\n    }),\n  )\n}\n\nexport type SelectorLike = types.input.meta.v1.LabelSelector | Record<string, Input<string>>\n\nexport function mapSelectorLikeToSelector(\n  selector: SelectorLike,\n): types.input.meta.v1.LabelSelector {\n  if (\"matchLabels\" in selector || \"matchExpressions\" in selector) {\n    return selector\n  }\n\n  return {\n    matchLabels: selector as Record<string, Input<string>>,\n  }\n}\n\nexport function getNamespaceName(namespace: NamespaceLike): Output<string> {\n  if (Namespace.isInstance(namespace)) {\n    return namespace.metadata.name\n  }\n\n  if (core.v1.Namespace.isInstance(namespace)) {\n    return namespace.metadata.name\n  }\n\n  return output(namespace)\n}\n\nexport function mapNamespaceNameToSelector(\n  namespace: Input<string>,\n): types.input.meta.v1.LabelSelector {\n  return {\n    matchLabels: {\n      \"kubernetes.io/metadata.name\": namespace,\n    },\n  }\n}\n\nexport function validateCluster(\n  entity: Input<k8s.Resource>,\n  cluster: Input<k8s.Cluster>,\n): Input<k8s.Cluster> {\n  return output({ entity, cluster }).apply(({ entity, cluster }) => {\n    if (entity.clusterId !== cluster.id) {\n      throw new Error(\n        `Cluster mismatch for ${entity.type} \"${entity.metadata.name}\": \"${entity.clusterId}\" != \"${cluster.id}\"`,\n      )\n    }\n\n    return cluster\n  })\n}\n\nexport { images }\n\n/**\n * Base class for all Kubernetes scoped resources.\n *\n * Provides common functionality for resources that have a cluster, namespace, metadata, and entity.\n */\nexport abstract class ScopedResource extends ComponentResource {\n  protected constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    /**\n     * The Kubernetes API version (e.g., \"v1\", \"apps/v1\", \"batch/v1\").\n     */\n    readonly apiVersion: Output<string>,\n\n    /**\n     * The Kubernetes kind (e.g., \"ConfigMap\", \"Deployment\", \"CronJob\").\n     */\n    readonly kind: Output<string>,\n\n    /**\n     * The namespace where the resource is located.\n     */\n    readonly namespace: Output<Namespace>,\n\n    /**\n     * The metadata of the underlying Kubernetes resource.\n     */\n    readonly metadata: Output<types.output.meta.v1.ObjectMeta>,\n  ) {\n    super(type, name, args, opts)\n  }\n\n  /**\n   * The cluster where the resource is located.\n   */\n  get cluster(): Output<k8s.Cluster> {\n    return this.namespace.cluster\n  }\n\n  /**\n   * The Highstate resource entity.\n   */\n  abstract get entity(): Output<k8s.ScopedResource>\n}\n","import type { k8s } from \"@highstate/library\"\nimport { getOrCreate } from \"@highstate/contract\"\nimport { toPromise } from \"@highstate/pulumi\"\nimport { core, type types } from \"@pulumi/kubernetes\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  type Output,\n  output,\n  type Unwrap,\n} from \"@pulumi/pulumi\"\nimport { getProvider, mapMetadata, type ScopedResourceArgs, validateCluster } from \"./shared\"\n\nexport type NamespaceArgs = Omit<ScopedResourceArgs, \"namespace\"> & {\n  /**\n   * The cluster where the namespace is located.\n   */\n  cluster: Input<k8s.Cluster>\n\n  /**\n   * Whether to apply \"pod-security.kubernetes.io/enforce=privileged\" label to the namespace.\n   */\n  privileged?: boolean\n}\n\nexport type CreateOrGetNamespaceArgs = NamespaceArgs & {\n  /**\n   * The resource to use to determine the name of the namespace.\n   *\n   * If not provided, the namespace will be created, otherwise it will be retrieved/patched.\n   */\n  resource?: Input<k8s.ScopedResource>\n\n  /**\n   * The namespace entity to patch/retrieve.\n   */\n  existing?: Input<k8s.Namespace> | undefined\n}\n\nexport abstract class Namespace extends ComponentResource {\n  constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    /**\n     * The cluster where the namespace is created.\n     */\n    readonly cluster: Output<k8s.Cluster>,\n\n    /*\n     * The metadata of the underlying Kubernetes namespace.\n     */\n    readonly metadata: Output<types.output.meta.v1.ObjectMeta>,\n\n    /**\n     * The spec of the underlying Kubernetes namespace.\n     */\n    readonly spec: Output<types.output.core.v1.NamespaceSpec>,\n\n    /**\n     * The status of the underlying Kubernetes namespace.\n     */\n    readonly status: Output<types.output.core.v1.NamespaceStatus>,\n  ) {\n    super(type, name, args, opts)\n  }\n\n  /**\n   * The Highstate namespace entity.\n   */\n  get entity(): Output<k8s.Namespace> {\n    return output({\n      type: \"namespace\",\n      clusterId: this.cluster.id,\n      clusterName: this.cluster.name,\n      metadata: this.metadata,\n    })\n  }\n\n  /**\n   * Creates a new namespace.\n   */\n  static create(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions): Namespace {\n    return new CreatedNamespace(name, args, opts)\n  }\n\n  /**\n   * Wraps an existing Kubernetes namespace.\n   */\n  static wrap(\n    name: string,\n    args: WrappedNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Namespace {\n    return new WrappedNamespace(name, args, opts)\n  }\n\n  /**\n   * Creates a new namespace or gets an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name. Will not be used when existing namespace is retrieved.\n   * @param args The arguments to create or get the namespace with.\n   * @param opts Optional resource options.\n   */\n  static async createOrGet(\n    name: string,\n    args: CreateOrGetNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<Namespace> {\n    if (args.resource) {\n      return await Namespace.forResourceAsync(args.resource, args.cluster)\n    }\n\n    if (args.existing) {\n      return await Namespace.forAsync(args.existing, args.cluster)\n    }\n\n    return new CreatedNamespace(name, args, opts)\n  }\n\n  /**\n   * Creates a new namespace or patches an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name.\n   * @param args The arguments to create or patch the namespace with.\n   * @param opts Optional resource options.\n   */\n  static createOrPatch(\n    name: string,\n    args: CreateOrGetNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Namespace {\n    if (args.resource) {\n      return new NamespacePatch(name, {\n        ...args,\n        name: output(args.resource).metadata.namespace,\n        cluster: validateCluster(args.resource, args.cluster),\n      })\n    }\n\n    if (args.existing) {\n      return new NamespacePatch(name, {\n        ...args,\n        name: output(args.existing).metadata.name,\n        cluster: validateCluster(args.existing, args.cluster),\n      })\n    }\n\n    return new CreatedNamespace(name, args, opts)\n  }\n\n  /**\n   * Patches an existing namespace.\n   *\n   * Will throw an error if the namespace does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name.\n   * @param args The arguments to patch the namespace with.\n   * @param opts Optional resource options.\n   */\n  static patch(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions): Namespace {\n    return new NamespacePatch(name, args, opts)\n  }\n\n  /**\n   * Gets an existing namespace.\n   *\n   * Will throw an error if the namespace does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name.\n   * @param args The arguments to get the namespace with.\n   * @param opts Optional resource options.\n   */\n  static get(\n    name: string,\n    args: ExternalNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Namespace {\n    return new ExternalNamespace(name, args, opts)\n  }\n\n  private static readonly namespaceCache = new Map<string, Namespace>()\n\n  /**\n   * Gets an existing namespace for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{clusterId}`.\n   *\n   * This method it idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static for(entity: k8s.Namespace, cluster: Input<k8s.Cluster>): Namespace {\n    return getOrCreate(\n      Namespace.namespaceCache,\n      `${entity.clusterName}.${entity.metadata.name}.${entity.clusterId}`,\n      name => {\n        return Namespace.get(name, {\n          name: entity.metadata.name,\n          cluster: validateCluster(entity, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing namespace for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * @param entity The entity to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static async forAsync(\n    entity: Input<k8s.Namespace>,\n    cluster: Input<k8s.Cluster>,\n  ): Promise<Namespace> {\n    const resolvedEntity = await toPromise(entity)\n\n    return Namespace.for(resolvedEntity, cluster)\n  }\n\n  /**\n   * Gets an existing namespace where the provided resource is located.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{clusterId}`.\n   *\n   * This method it idempotent and will return the same instance for the same resource.\n   *\n   * @param resource The resource to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static forResource(resource: k8s.ScopedResource, cluster: Input<k8s.Cluster>): Namespace {\n    return getOrCreate(\n      Namespace.namespaceCache,\n      `${resource.clusterName}.${resource.metadata.namespace}.${resource.clusterId}`,\n      name => {\n        return Namespace.get(name, {\n          name: resource.metadata.namespace,\n          cluster: validateCluster(resource, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing namespace for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * @param resource The resource to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static async forResourceAsync(\n    resource: Input<k8s.ScopedResource>,\n    cluster: Input<k8s.Cluster>,\n  ): Promise<Namespace> {\n    const resolvedResource = await toPromise(resource)\n\n    return Namespace.forResource(resolvedResource, cluster)\n  }\n}\n\nfunction mapNamespaceMetadata(\n  args: NamespaceArgs,\n  fallbackName: string,\n): Output<Unwrap<types.input.meta.v1.ObjectMeta>> {\n  return mapMetadata(args, fallbackName).apply(metadata => {\n    if (args.privileged) {\n      metadata.labels = {\n        ...metadata.labels,\n        \"pod-security.kubernetes.io/enforce\": \"privileged\",\n      }\n    }\n\n    return metadata\n  })\n}\n\nclass CreatedNamespace extends Namespace {\n  constructor(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions) {\n    const namespace = output(args.cluster).apply(cluster => {\n      return new core.v1.Namespace(\n        name,\n        { metadata: mapNamespaceMetadata(args, name) },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:Namespace\",\n      name,\n      args,\n      opts,\n      output(args.cluster),\n      namespace.metadata,\n      namespace.spec,\n      namespace.status,\n    )\n  }\n}\n\nclass NamespacePatch extends Namespace {\n  constructor(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions) {\n    const namespace = output(args.cluster).apply(cluster => {\n      return new core.v1.NamespacePatch(\n        name,\n        { metadata: mapNamespaceMetadata(args, name) },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:NamespacePatch\",\n      name,\n      args,\n      opts,\n      output(args.cluster),\n      namespace.metadata,\n      namespace.spec,\n      namespace.status,\n    )\n  }\n}\n\nexport type WrappedNamespaceArgs = {\n  /**\n   * The underlying Kubernetes namespace to wrap.\n   */\n  namespace: Input<core.v1.Namespace>\n\n  /**\n   * The cluster where the namespace is located.\n   */\n  cluster: Input<k8s.Cluster>\n}\n\nexport type ExternalNamespaceArgs = {\n  /**\n   * The real name of the namespace in the cluster.\n   */\n  name: Input<string>\n\n  /**\n   * The cluster where the namespace is located.\n   */\n  cluster: Input<k8s.Cluster>\n}\n\nclass ExternalNamespace extends Namespace {\n  constructor(name: string, args: ExternalNamespaceArgs, opts?: ComponentResourceOptions) {\n    const namespace = output(args.cluster).apply(cluster => {\n      return core.v1.Namespace.get(name, args.name, {\n        ...opts,\n        parent: this,\n        provider: getProvider(cluster),\n      })\n    })\n\n    super(\n      \"highstate:k8s:ExternalNamespace\",\n      name,\n      args,\n      opts,\n      output(args.cluster),\n      namespace.metadata,\n      namespace.spec,\n      namespace.status,\n    )\n  }\n}\n\nclass WrappedNamespace extends Namespace {\n  constructor(name: string, args: WrappedNamespaceArgs, opts?: ComponentResourceOptions) {\n    super(\n      \"highstate:k8s:WrappedNamespace\",\n      name,\n      args,\n      opts,\n\n      output(args.cluster),\n      output(args.namespace).metadata,\n      output(args.namespace).spec,\n      output(args.namespace).status,\n    )\n  }\n}\n"]}

package/dist/{chunk-XU6ZPTWO.js → chunk-YY7RUC3G.js}

@@ -1,5 +1,5 @@
-import { ExposableWorkload, getExposableWorkloadComponents, exposableWorkloadExtraArgs } from './chunk-IDKGFFZ7.js';
-import { Namespace, mapMetadata, getProvider } from './chunk-WGMJCZSK.js';
+import { ExposableWorkload, getExposableWorkloadComponents, exposableWorkloadExtraArgs } from './chunk-STPKTYD6.js';
+import { Namespace, mapMetadata, getProvider } from './chunk-UHWJ2GDK.js';
 import { getOrCreate } from '@highstate/contract';
 import { output, toPromise, interpolate } from '@highstate/pulumi';
 import { apps } from '@pulumi/kubernetes';
@@ -305,5 +305,5 @@ var ExternalStatefulSet = class extends StatefulSet {
 };
 
 export { StatefulSet };
-//# sourceMappingURL=chunk-XU6ZPTWO.js.map
-//# sourceMappingURL=chunk-XU6ZPTWO.js.map
+//# sourceMappingURL=chunk-YY7RUC3G.js.map
+//# sourceMappingURL=chunk-YY7RUC3G.js.map

package/dist/{chunk-XU6ZPTWO.js.map → chunk-YY7RUC3G.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/stateful-set.ts"],"names":["service","args","podTemplate","labels"],"mappings":";;;;;;;;AA4CO,IAAe,WAAA,GAAf,MAAe,YAAA,SAAoB,iBAAA,CAAkB;AAAA,EAChD,WAAA,CACR,IAAA,EACA,IAAA,EACA,IAAA,EACA,MAEA,UAAA,EACA,IAAA,EACA,YAAA,EACA,UAAA,EACA,WACA,QAAA,EACA,aAAA,EAEA,OAAA,EACA,MAAA,EAKS,MAKA,MAAA,EACT;AACA,IAAA,KAAA;AAAA,MACE,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,UAAA;AAAA,MACA,IAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAA;AAAA,MACA,SAAA;AAAA,MACA,QAAA;AAAA,MACA,aAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF;AArBS,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAiBX;AAAA,EAEA,IAAuB,gBAAA,GAA4D;AACjF,IAAA,OAAO,IAAA,CAAK,KAAK,QAAA,CAAS,QAAA;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAAkC;AACpC,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,IAAA,EAAM,cAAA;AAAA,MACN,SAAA,EAAW,KAAK,OAAA,CAAQ,EAAA;AAAA,MACxB,WAAA,EAAa,KAAK,OAAA,CAAQ,IAAA;AAAA,MAC1B,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,OAAA,EAAS,KAAK,OAAA,CAAQ;AAAA,KACvB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAuB,IAAA,EAA8C;AAC/F,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACa;AACb,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,iBAAiB,IAAA,EAAM;AAAA,QAChC,GAAG,IAAA;AAAA,QACH,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,IAAA;AAAA,QACrC,SAAA,EAAW,UAAU,gBAAA,CAAiB,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO;AAAA,OACpF,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,WAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,aAAY,QAAA,CAAS,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO,CAAA;AAAA,IACjF;AAEA,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAuB,IAAA,EAA8C;AAC9F,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACa;AACb,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,GAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACa;AACb,IAAA,OAAO,IAAI,mBAAA,CAAoB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EACjD;AAAA,EAEA,OAAwB,gBAAA,mBAAmB,IAAI,GAAA,EAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaxE,OAAO,GAAA,CAAI,MAAA,EAAyB,OAAA,EAA0C;AAC5E,IAAA,OAAO,WAAA;AAAA,MACL,YAAA,CAAY,gBAAA;AAAA,MACZ,CAAA,EAAG,MAAA,CAAO,WAAW,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,OAAO,SAAS,CAAA,CAAA;AAAA,MAC9F,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,YAAA,CAAY,IAAI,IAAA,EAAM;AAAA,UAC3B,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,SAAA,EAAW,SAAA,CAAU,WAAA,CAAY,MAAA,EAAQ,OAAO;AAAA,SACjD,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,aAAa,QAAA,CACX,MAAA,EACA,OAAA,EACsB;AACtB,IAAA,MAAM,cAAA,GAAiB,MAAM,SAAA,CAAU,MAAM,CAAA;AAC7C,IAAA,OAAO,YAAA,CAAY,GAAA,CAAI,cAAA,EAAgB,OAAO,CAAA;AAAA,EAChD;AAAA,EAEU,eAAA,GAAgD;AACxD,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,WAAA,CAAA,cAAA,EAA4B,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,CAAA;AAAA,MAC3D,WAAA,EAAa,oCAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA,EAEA,IAAc,YAAA,GAAuB;AACnC,IAAA,OAAO,aAAA;AAAA,EACT;AACF;AAEA,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EAC3C,WAAA,CAAY,IAAA,EAAc,IAAA,EAAuB,IAAA,EAAiC;AAChF,IAAA,MAAM,EAAE,MAAA,EAAQ,WAAA,EAAa,eAAe,UAAA,EAAY,OAAA,EAAS,QAAO,GACtE,8BAAA;AAAA,MACE,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA;AAAA,QAGH,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,KAAA,CAAM,CAAAA,QAAAA,MAAY,EAAE,GAAGA,QAAAA,EAAQ,CAAE;AAAA,OACjE;AAAA,MACA,MAAM,IAAA;AAAA,MACN;AAAA,KACF;AAEF,IAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAClE,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,WAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,IAAA,EAAM,OAAO,EAAE,IAAA,EAAM,aAAa,MAAA,EAAQ,OAAA,EAAS,CAAA,CAAE,KAAA;AAAA,YACnD,CAAC,EAAE,IAAA,EAAAC,KAAAA,EAAM,WAAA,EAAAC,cAAa,MAAA,EAAAC,OAAAA,EAAQ,OAAA,EAAAH,QAAAA,EAAQ,KAAM;AAC1C,cAAA,OAAO,SAAA;AAAA,gBACL;AAAA,kBACE,WAAA,EAAaA,UAAS,QAAA,CAAS,IAAA;AAAA,kBAC/B,QAAA,EAAUE,YAAAA;AAAA,kBACV,QAAA,EAAU,EAAE,WAAA,EAAaC,OAAAA;AAAO,iBAClC;AAAA,gBACA,IAAA,CAAKF,OAAM,0BAA0B;AAAA,eACvC;AAAA,YACF;AAAA;AACF,SACF;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,YAAY,OAAO;AAAA;AAC/B,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,2BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,WAAA,CAAY,UAAA;AAAA,MACZ,WAAA,CAAY,IAAA;AAAA,MACZ,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,MAC1B,UAAA;AAAA,MACA,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,WAAA,CAAY,QAAA;AAAA,MACZ,aAAA;AAAA,MAEA,OAAA;AAAA,MACA,MAAA;AAAA,MAEA,WAAA,CAAY,IAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AAAA,EACF;AACF,CAAA;AAEA,IAAM,gBAAA,GAAN,cAA+B,WAAA,CAAY;AAAA,EACzC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAuB,IAAA,EAAiC;AAChF,IAAA,MAAM,EAAE,MAAA,EAAQ,WAAA,EAAa,aAAA,EAAe,UAAA,EAAY,OAAA,EAAS,MAAA,EAAO,GACtE,8BAAA,CAA+B,IAAA,EAAM,IAAA,EAAM,MAAM,MAAM,IAAI,CAAA;AAE7D,IAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAClE,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,gBAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,MAAM,MAAA,CAAO,EAAE,IAAA,EAAM,WAAA,EAAa,QAAQ,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,IAAA,EAAAA,KAAAA,EAAM,aAAAC,YAAAA,EAAa,MAAA,EAAAC,SAAO,KAAM;AACnF,YAAA,OAAO,SAAA;AAAA,cACL;AAAA,gBACE,QAAA,EAAUD,YAAAA;AAAA,gBACV,QAAA,EAAU,EAAE,WAAA,EAAaC,OAAAA;AAAO,eAClC;AAAA,cACA,IAAA,CAAKF,OAAM,0BAA0B;AAAA,aACvC;AAAA,UACF,CAAC;AAAA,SACH;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,YAAY,OAAO;AAAA;AAC/B,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,gCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,WAAA,CAAY,UAAA;AAAA,MACZ,WAAA,CAAY,IAAA;AAAA,MACZ,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,MAC1B,UAAA;AAAA,MACA,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,WAAA,CAAY,QAAA;AAAA,MACZ,aAAA;AAAA,MAEA,OAAA;AAAA,MACA,MAAA;AAAA,MAEA,WAAA,CAAY,IAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AAAA,EACF;AACF,CAAA;AAsBA,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EAC3C,WAAA,CAAY,IAAA,EAAc,IAAA,EAA8B,IAAA,EAAiC;AACvF,IAAA,KAAA;AAAA,MACE,kCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,UAAA;AAAA,MACzB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAA;AAAA,MACzB,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,MAC1B,MAAA,CAAO,EAAE,CAAA;AAAA,MACT,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,QAAA;AAAA,MAEzB,OAAO,MAAS,CAAA;AAAA,MAChB,MAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,MAAA,CAAO,EAAE,CAAA;AAAA,MAET,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAA;AAAA,MACzB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE;AAAA,KAC3B;AAAA,EACF;AACF,CAAA;AAcA,IAAM,mBAAA,GAAN,cAAkC,WAAA,CAAY;AAAA,EAC5C,WAAA,CAAY,IAAA,EAAc,IAAA,EAA+B,IAAA,EAAiC;AACxF,IAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAClE,MAAA,OAAO,IAAA,CAAK,GAAG,WAAA,CAAY,GAAA;AAAA,QACzB,IAAA;AAAA,QACA,WAAA,CAAA,EAAc,OAAO,IAAA,CAAK,SAAS,EAAE,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,QAC/D,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,mCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,WAAA,CAAY,UAAA;AAAA,MACZ,WAAA,CAAY,IAAA;AAAA,MACZ,MAAA,CAAO,EAAE,CAAA;AAAA,MACT,MAAA,CAAO,EAAE,CAAA;AAAA,MACT,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,WAAA,CAAY,QAAA;AAAA,MAEZ,OAAO,MAAS,CAAA;AAAA,MAChB,OAAO,MAAS,CAAA;AAAA,MAChB,MAAA,CAAO,EAAE,CAAA;AAAA,MAET,WAAA,CAAY,IAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AAAA,EACF;AACF,CAAA","file":"chunk-XU6ZPTWO.js","sourcesContent":["import type { AccessPointRoute } from \"@highstate/common\"\nimport type { k8s } from \"@highstate/library\"\nimport type { Container } from \"./container\"\nimport type { NetworkPolicy } from \"./network-policy\"\nimport type { Service } from \"./service\"\nimport { getOrCreate, type UnitTerminal } from \"@highstate/contract\"\nimport {\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  interpolate,\n  type Output,\n  output,\n  toPromise,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { apps, type types } from \"@pulumi/kubernetes\"\nimport { deepmerge } from \"deepmerge-ts\"\nimport { omit } from \"remeda\"\nimport { Namespace } from \"./namespace\"\nimport { getProvider, mapMetadata } from \"./shared\"\nimport {\n  ExposableWorkload,\n  type ExposableWorkloadArgs,\n  exposableWorkloadExtraArgs,\n  getExposableWorkloadComponents,\n  type WorkloadTerminalArgs,\n} from \"./workload\"\n\nexport type StatefulSetArgs = Omit<ExposableWorkloadArgs, \"existing\"> &\n  Omit<Partial<types.input.apps.v1.StatefulSetSpec>, \"template\"> & {\n    template?: {\n      metadata?: types.input.meta.v1.ObjectMeta\n      spec?: Partial<types.input.core.v1.PodSpec>\n    }\n  }\n\nexport type CreateOrGetStatefulSetArgs = StatefulSetArgs & {\n  /**\n   * The entity to use to determine the stateful set to patch.\n   */\n  existing: Input<k8s.StatefulSet> | undefined\n}\n\nexport abstract class StatefulSet extends ExposableWorkload {\n  protected constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    apiVersion: Output<string>,\n    kind: Output<string>,\n    terminalArgs: Output<Unwrap<WorkloadTerminalArgs>>,\n    containers: Output<Container[]>,\n    namespace: Output<Namespace>,\n    metadata: Output<types.output.meta.v1.ObjectMeta>,\n    networkPolicy: Output<NetworkPolicy | undefined>,\n\n    service: Output<Service | undefined>,\n    routes: Output<AccessPointRoute[]>,\n\n    /**\n     * The spec of the underlying Kubernetes stateful set.\n     */\n    readonly spec: Output<types.output.apps.v1.StatefulSetSpec>,\n\n    /**\n     * The status of the underlying Kubernetes stateful set.\n     */\n    readonly status: Output<types.output.apps.v1.StatefulSetStatus>,\n  ) {\n    super(\n      type,\n      name,\n      args,\n      opts,\n      apiVersion,\n      kind,\n      terminalArgs,\n      containers,\n      namespace,\n      metadata,\n      networkPolicy,\n      service,\n      routes,\n    )\n  }\n\n  protected override get templateMetadata(): Output<types.output.meta.v1.ObjectMeta> {\n    return this.spec.template.metadata\n  }\n\n  /**\n   * The Highstate stateful set entity.\n   */\n  get entity(): Output<k8s.StatefulSet> {\n    return output({\n      type: \"stateful-set\",\n      clusterId: this.cluster.id,\n      clusterName: this.cluster.name,\n      metadata: this.metadata,\n      service: this.service.entity,\n    })\n  }\n\n  /**\n   * Creates a new stateful set.\n   */\n  static create(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions): StatefulSet {\n    return new CreatedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Creates a new stateful set or patches an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the stateful set name.\n   * @param args The arguments to create or patch the stateful set with.\n   * @param opts Optional resource options.\n   */\n  static createOrPatch(\n    name: string,\n    args: CreateOrGetStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): StatefulSet {\n    if (args.existing) {\n      return new StatefulSetPatch(name, {\n        ...args,\n        name: output(args.existing).metadata.name,\n        namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),\n      })\n    }\n\n    return new CreatedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Creates a new stateful set or gets an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the stateful set name. Will not be used when existing stateful set is retrieved.\n   * @param args The arguments to create or get the stateful set with.\n   * @param opts Optional resource options.\n   */\n  static async createOrGet(\n    name: string,\n    args: CreateOrGetStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<StatefulSet> {\n    if (args.existing) {\n      return await StatefulSet.forAsync(args.existing, output(args.namespace).cluster)\n    }\n\n    return new CreatedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Patches an existing stateful set.\n   *\n   * Will throw an error if the stateful set does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the stateful set name.\n   * @param args The arguments to patch the stateful set with.\n   * @param opts Optional resource options.\n   */\n  static patch(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions): StatefulSet {\n    return new StatefulSetPatch(name, args, opts)\n  }\n\n  /**\n   * Wraps an existing Kubernetes stateful set.\n   */\n  static wrap(\n    name: string,\n    args: WrappedStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): StatefulSet {\n    return new WrappedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Gets an existing stateful set.\n   *\n   * Will throw an error if the stateful set does not exist.\n   */\n  static get(\n    name: string,\n    args: ExternalStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): StatefulSet {\n    return new ExternalStatefulSet(name, args, opts)\n  }\n\n  private static readonly statefulSetCache = new Map<string, StatefulSet>()\n\n  /**\n   * Gets an existing stateful set for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the stateful set for.\n   * @param cluster The cluster where the stateful set is located.\n   */\n  static for(entity: k8s.StatefulSet, cluster: Input<k8s.Cluster>): StatefulSet {\n    return getOrCreate(\n      StatefulSet.statefulSetCache,\n      `${entity.clusterName}.${entity.metadata.namespace}.${entity.metadata.name}.${entity.clusterId}`,\n      name => {\n        return StatefulSet.get(name, {\n          name: entity.metadata.name,\n          namespace: Namespace.forResource(entity, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing stateful set for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the stateful set for.\n   * @param cluster The cluster where the stateful set is located.\n   */\n  static async forAsync(\n    entity: Input<k8s.StatefulSet>,\n    cluster: Input<k8s.Cluster>,\n  ): Promise<StatefulSet> {\n    const resolvedEntity = await toPromise(entity)\n    return StatefulSet.for(resolvedEntity, cluster)\n  }\n\n  protected getTerminalMeta(): Output<UnitTerminal[\"meta\"]> {\n    return output({\n      title: \"StatefulSet\",\n      globalTitle: interpolate`StatefulSet | ${this.metadata.name}`,\n      description: \"The shell inside the stateful set.\",\n      icon: \"devicon:kubernetes\",\n    })\n  }\n\n  protected get resourceType(): string {\n    return \"statefulset\"\n  }\n}\n\nclass CreatedStatefulSet extends StatefulSet {\n  constructor(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions) {\n    const { labels, podTemplate, networkPolicy, containers, service, routes } =\n      getExposableWorkloadComponents(\n        name,\n        {\n          ...args,\n\n          // force create a service since it is required for stateful sets\n          service: output(args.service).apply(service => ({ ...service })),\n        },\n        () => this,\n        opts,\n      )\n\n    const statefulSet = output(args.namespace).cluster.apply(cluster => {\n      return new apps.v1.StatefulSet(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: output({ args, podTemplate, labels, service }).apply(\n            ({ args, podTemplate, labels, service }) => {\n              return deepmerge(\n                {\n                  serviceName: service?.metadata.name,\n                  template: podTemplate,\n                  selector: { matchLabels: labels },\n                },\n                omit(args, exposableWorkloadExtraArgs),\n              ) as types.input.apps.v1.StatefulSetSpec\n            },\n          ),\n        },\n        {\n          ...opts,\n          parent: this,\n          provider: getProvider(cluster),\n        },\n      )\n    })\n\n    super(\n      \"highstate:k8s:StatefulSet\",\n      name,\n      args,\n      opts,\n\n      statefulSet.apiVersion,\n      statefulSet.kind,\n      output(args.terminal ?? {}),\n      containers,\n      output(args.namespace),\n      statefulSet.metadata,\n      networkPolicy,\n\n      service,\n      routes,\n\n      statefulSet.spec,\n      statefulSet.status,\n    )\n  }\n}\n\nclass StatefulSetPatch extends StatefulSet {\n  constructor(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions) {\n    const { labels, podTemplate, networkPolicy, containers, service, routes } =\n      getExposableWorkloadComponents(name, args, () => this, opts)\n\n    const statefulSet = output(args.namespace).cluster.apply(cluster => {\n      return new apps.v1.StatefulSetPatch(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: output({ args, podTemplate, labels }).apply(({ args, podTemplate, labels }) => {\n            return deepmerge(\n              {\n                template: podTemplate,\n                selector: { matchLabels: labels },\n              },\n              omit(args, exposableWorkloadExtraArgs),\n            ) as types.input.apps.v1.StatefulSetSpec\n          }),\n        },\n        {\n          ...opts,\n          parent: this,\n          provider: getProvider(cluster),\n        },\n      )\n    })\n\n    super(\n      \"highstate:k8s:StatefulSetPatch\",\n      name,\n      args,\n      opts,\n\n      statefulSet.apiVersion,\n      statefulSet.kind,\n      output(args.terminal ?? {}),\n      containers,\n      output(args.namespace),\n      statefulSet.metadata,\n      networkPolicy,\n\n      service,\n      routes,\n\n      statefulSet.spec,\n      statefulSet.status,\n    )\n  }\n}\n\nexport type WrappedStatefulSetArgs = {\n  /**\n   * The underlying Kubernetes stateful set to wrap.\n   */\n  statefulSet: Input<apps.v1.StatefulSet>\n\n  // TODO: remove\n  service?: Input<Service>\n\n  /**\n   * The namespace where the stateful set is located.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The args for the terminal to use.\n   */\n  terminal?: Input<WorkloadTerminalArgs>\n}\n\nclass WrappedStatefulSet extends StatefulSet {\n  constructor(name: string, args: WrappedStatefulSetArgs, opts?: ComponentResourceOptions) {\n    super(\n      \"highstate:k8s:WrappedStatefulSet\",\n      name,\n      args,\n      opts,\n\n      output(args.statefulSet).apiVersion,\n      output(args.statefulSet).kind,\n      output(args.terminal ?? {}),\n      output([]),\n      output(args.namespace),\n      output(args.statefulSet).metadata,\n\n      output(undefined),\n      output(args.service),\n      output([]),\n\n      output(args.statefulSet).spec,\n      output(args.statefulSet).status,\n    )\n  }\n}\n\nexport type ExternalStatefulSetArgs = {\n  /**\n   * The name of the stateful set to get.\n   */\n  name: Input<string>\n\n  /**\n   * The namespace where the stateful set is located.\n   */\n  namespace: Input<Namespace>\n}\n\nclass ExternalStatefulSet extends StatefulSet {\n  constructor(name: string, args: ExternalStatefulSetArgs, opts?: ComponentResourceOptions) {\n    const statefulSet = output(args.namespace).cluster.apply(cluster => {\n      return apps.v1.StatefulSet.get(\n        name,\n        interpolate`${output(args.namespace).metadata.name}/${args.name}`,\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:ExternalStatefulSet\",\n      name,\n      args,\n      opts,\n\n      statefulSet.apiVersion,\n      statefulSet.kind,\n      output({}),\n      output([]),\n      output(args.namespace),\n      statefulSet.metadata,\n\n      output(undefined),\n      output(undefined),\n      output([]),\n\n      statefulSet.spec,\n      statefulSet.status,\n    )\n  }\n}\n"]}
+{"version":3,"sources":["../src/stateful-set.ts"],"names":["service","args","podTemplate","labels"],"mappings":";;;;;;;;AA4CO,IAAe,WAAA,GAAf,MAAe,YAAA,SAAoB,iBAAA,CAAkB;AAAA,EAChD,WAAA,CACR,IAAA,EACA,IAAA,EACA,IAAA,EACA,MAEA,UAAA,EACA,IAAA,EACA,YAAA,EACA,UAAA,EACA,WACA,QAAA,EACA,aAAA,EAEA,OAAA,EACA,MAAA,EAKS,MAKA,MAAA,EACT;AACA,IAAA,KAAA;AAAA,MACE,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,UAAA;AAAA,MACA,IAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAA;AAAA,MACA,SAAA;AAAA,MACA,QAAA;AAAA,MACA,aAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF;AArBS,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAiBX;AAAA,EAEA,IAAuB,gBAAA,GAA4D;AACjF,IAAA,OAAO,IAAA,CAAK,KAAK,QAAA,CAAS,QAAA;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAAkC;AACpC,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,IAAA,EAAM,cAAA;AAAA,MACN,SAAA,EAAW,KAAK,OAAA,CAAQ,EAAA;AAAA,MACxB,WAAA,EAAa,KAAK,OAAA,CAAQ,IAAA;AAAA,MAC1B,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,OAAA,EAAS,KAAK,OAAA,CAAQ;AAAA,KACvB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAuB,IAAA,EAA8C;AAC/F,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACa;AACb,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,iBAAiB,IAAA,EAAM;AAAA,QAChC,GAAG,IAAA;AAAA,QACH,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,IAAA;AAAA,QACrC,SAAA,EAAW,UAAU,gBAAA,CAAiB,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO;AAAA,OACpF,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,WAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,aAAY,QAAA,CAAS,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO,CAAA;AAAA,IACjF;AAEA,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAuB,IAAA,EAA8C;AAC9F,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACa;AACb,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,GAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACa;AACb,IAAA,OAAO,IAAI,mBAAA,CAAoB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EACjD;AAAA,EAEA,OAAwB,gBAAA,mBAAmB,IAAI,GAAA,EAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaxE,OAAO,GAAA,CAAI,MAAA,EAAyB,OAAA,EAA0C;AAC5E,IAAA,OAAO,WAAA;AAAA,MACL,YAAA,CAAY,gBAAA;AAAA,MACZ,CAAA,EAAG,MAAA,CAAO,WAAW,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,OAAO,SAAS,CAAA,CAAA;AAAA,MAC9F,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,YAAA,CAAY,IAAI,IAAA,EAAM;AAAA,UAC3B,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,SAAA,EAAW,SAAA,CAAU,WAAA,CAAY,MAAA,EAAQ,OAAO;AAAA,SACjD,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,aAAa,QAAA,CACX,MAAA,EACA,OAAA,EACsB;AACtB,IAAA,MAAM,cAAA,GAAiB,MAAM,SAAA,CAAU,MAAM,CAAA;AAC7C,IAAA,OAAO,YAAA,CAAY,GAAA,CAAI,cAAA,EAAgB,OAAO,CAAA;AAAA,EAChD;AAAA,EAEU,eAAA,GAAgD;AACxD,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,WAAA,CAAA,cAAA,EAA4B,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,CAAA;AAAA,MAC3D,WAAA,EAAa,oCAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA,EAEA,IAAc,YAAA,GAAuB;AACnC,IAAA,OAAO,aAAA;AAAA,EACT;AACF;AAEA,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EAC3C,WAAA,CAAY,IAAA,EAAc,IAAA,EAAuB,IAAA,EAAiC;AAChF,IAAA,MAAM,EAAE,MAAA,EAAQ,WAAA,EAAa,eAAe,UAAA,EAAY,OAAA,EAAS,QAAO,GACtE,8BAAA;AAAA,MACE,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA;AAAA,QAGH,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,KAAA,CAAM,CAAAA,QAAAA,MAAY,EAAE,GAAGA,QAAAA,EAAQ,CAAE;AAAA,OACjE;AAAA,MACA,MAAM,IAAA;AAAA,MACN;AAAA,KACF;AAEF,IAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAClE,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,WAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,IAAA,EAAM,OAAO,EAAE,IAAA,EAAM,aAAa,MAAA,EAAQ,OAAA,EAAS,CAAA,CAAE,KAAA;AAAA,YACnD,CAAC,EAAE,IAAA,EAAAC,KAAAA,EAAM,WAAA,EAAAC,cAAa,MAAA,EAAAC,OAAAA,EAAQ,OAAA,EAAAH,QAAAA,EAAQ,KAAM;AAC1C,cAAA,OAAO,SAAA;AAAA,gBACL;AAAA,kBACE,WAAA,EAAaA,UAAS,QAAA,CAAS,IAAA;AAAA,kBAC/B,QAAA,EAAUE,YAAAA;AAAA,kBACV,QAAA,EAAU,EAAE,WAAA,EAAaC,OAAAA;AAAO,iBAClC;AAAA,gBACA,IAAA,CAAKF,OAAM,0BAA0B;AAAA,eACvC;AAAA,YACF;AAAA;AACF,SACF;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,YAAY,OAAO;AAAA;AAC/B,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,2BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,WAAA,CAAY,UAAA;AAAA,MACZ,WAAA,CAAY,IAAA;AAAA,MACZ,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,MAC1B,UAAA;AAAA,MACA,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,WAAA,CAAY,QAAA;AAAA,MACZ,aAAA;AAAA,MAEA,OAAA;AAAA,MACA,MAAA;AAAA,MAEA,WAAA,CAAY,IAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AAAA,EACF;AACF,CAAA;AAEA,IAAM,gBAAA,GAAN,cAA+B,WAAA,CAAY;AAAA,EACzC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAuB,IAAA,EAAiC;AAChF,IAAA,MAAM,EAAE,MAAA,EAAQ,WAAA,EAAa,aAAA,EAAe,UAAA,EAAY,OAAA,EAAS,MAAA,EAAO,GACtE,8BAAA,CAA+B,IAAA,EAAM,IAAA,EAAM,MAAM,MAAM,IAAI,CAAA;AAE7D,IAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAClE,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,gBAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,MAAM,MAAA,CAAO,EAAE,IAAA,EAAM,WAAA,EAAa,QAAQ,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,IAAA,EAAAA,KAAAA,EAAM,aAAAC,YAAAA,EAAa,MAAA,EAAAC,SAAO,KAAM;AACnF,YAAA,OAAO,SAAA;AAAA,cACL;AAAA,gBACE,QAAA,EAAUD,YAAAA;AAAA,gBACV,QAAA,EAAU,EAAE,WAAA,EAAaC,OAAAA;AAAO,eAClC;AAAA,cACA,IAAA,CAAKF,OAAM,0BAA0B;AAAA,aACvC;AAAA,UACF,CAAC;AAAA,SACH;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,YAAY,OAAO;AAAA;AAC/B,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,gCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,WAAA,CAAY,UAAA;AAAA,MACZ,WAAA,CAAY,IAAA;AAAA,MACZ,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,MAC1B,UAAA;AAAA,MACA,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,WAAA,CAAY,QAAA;AAAA,MACZ,aAAA;AAAA,MAEA,OAAA;AAAA,MACA,MAAA;AAAA,MAEA,WAAA,CAAY,IAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AAAA,EACF;AACF,CAAA;AAsBA,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EAC3C,WAAA,CAAY,IAAA,EAAc,IAAA,EAA8B,IAAA,EAAiC;AACvF,IAAA,KAAA;AAAA,MACE,kCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,UAAA;AAAA,MACzB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAA;AAAA,MACzB,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,MAC1B,MAAA,CAAO,EAAE,CAAA;AAAA,MACT,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,QAAA;AAAA,MAEzB,OAAO,MAAS,CAAA;AAAA,MAChB,MAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,MAAA,CAAO,EAAE,CAAA;AAAA,MAET,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAA;AAAA,MACzB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE;AAAA,KAC3B;AAAA,EACF;AACF,CAAA;AAcA,IAAM,mBAAA,GAAN,cAAkC,WAAA,CAAY;AAAA,EAC5C,WAAA,CAAY,IAAA,EAAc,IAAA,EAA+B,IAAA,EAAiC;AACxF,IAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAClE,MAAA,OAAO,IAAA,CAAK,GAAG,WAAA,CAAY,GAAA;AAAA,QACzB,IAAA;AAAA,QACA,WAAA,CAAA,EAAc,OAAO,IAAA,CAAK,SAAS,EAAE,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,QAC/D,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,mCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,WAAA,CAAY,UAAA;AAAA,MACZ,WAAA,CAAY,IAAA;AAAA,MACZ,MAAA,CAAO,EAAE,CAAA;AAAA,MACT,MAAA,CAAO,EAAE,CAAA;AAAA,MACT,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,WAAA,CAAY,QAAA;AAAA,MAEZ,OAAO,MAAS,CAAA;AAAA,MAChB,OAAO,MAAS,CAAA;AAAA,MAChB,MAAA,CAAO,EAAE,CAAA;AAAA,MAET,WAAA,CAAY,IAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AAAA,EACF;AACF,CAAA","file":"chunk-YY7RUC3G.js","sourcesContent":["import type { AccessPointRoute } from \"@highstate/common\"\nimport type { k8s } from \"@highstate/library\"\nimport type { Container } from \"./container\"\nimport type { NetworkPolicy } from \"./network-policy\"\nimport type { Service } from \"./service\"\nimport { getOrCreate, type UnitTerminal } from \"@highstate/contract\"\nimport {\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  interpolate,\n  type Output,\n  output,\n  toPromise,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { apps, type types } from \"@pulumi/kubernetes\"\nimport { deepmerge } from \"deepmerge-ts\"\nimport { omit } from \"remeda\"\nimport { Namespace } from \"./namespace\"\nimport { getProvider, mapMetadata } from \"./shared\"\nimport {\n  ExposableWorkload,\n  type ExposableWorkloadArgs,\n  exposableWorkloadExtraArgs,\n  getExposableWorkloadComponents,\n  type WorkloadTerminalArgs,\n} from \"./workload\"\n\nexport type StatefulSetArgs = Omit<ExposableWorkloadArgs, \"existing\"> &\n  Omit<Partial<types.input.apps.v1.StatefulSetSpec>, \"template\"> & {\n    template?: {\n      metadata?: types.input.meta.v1.ObjectMeta\n      spec?: Partial<types.input.core.v1.PodSpec>\n    }\n  }\n\nexport type CreateOrGetStatefulSetArgs = StatefulSetArgs & {\n  /**\n   * The entity to use to determine the stateful set to patch.\n   */\n  existing: Input<k8s.StatefulSet> | undefined\n}\n\nexport abstract class StatefulSet extends ExposableWorkload {\n  protected constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    apiVersion: Output<string>,\n    kind: Output<string>,\n    terminalArgs: Output<Unwrap<WorkloadTerminalArgs>>,\n    containers: Output<Container[]>,\n    namespace: Output<Namespace>,\n    metadata: Output<types.output.meta.v1.ObjectMeta>,\n    networkPolicy: Output<NetworkPolicy | undefined>,\n\n    service: Output<Service | undefined>,\n    routes: Output<AccessPointRoute[]>,\n\n    /**\n     * The spec of the underlying Kubernetes stateful set.\n     */\n    readonly spec: Output<types.output.apps.v1.StatefulSetSpec>,\n\n    /**\n     * The status of the underlying Kubernetes stateful set.\n     */\n    readonly status: Output<types.output.apps.v1.StatefulSetStatus>,\n  ) {\n    super(\n      type,\n      name,\n      args,\n      opts,\n      apiVersion,\n      kind,\n      terminalArgs,\n      containers,\n      namespace,\n      metadata,\n      networkPolicy,\n      service,\n      routes,\n    )\n  }\n\n  protected override get templateMetadata(): Output<types.output.meta.v1.ObjectMeta> {\n    return this.spec.template.metadata\n  }\n\n  /**\n   * The Highstate stateful set entity.\n   */\n  get entity(): Output<k8s.StatefulSet> {\n    return output({\n      type: \"stateful-set\",\n      clusterId: this.cluster.id,\n      clusterName: this.cluster.name,\n      metadata: this.metadata,\n      service: this.service.entity,\n    })\n  }\n\n  /**\n   * Creates a new stateful set.\n   */\n  static create(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions): StatefulSet {\n    return new CreatedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Creates a new stateful set or patches an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the stateful set name.\n   * @param args The arguments to create or patch the stateful set with.\n   * @param opts Optional resource options.\n   */\n  static createOrPatch(\n    name: string,\n    args: CreateOrGetStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): StatefulSet {\n    if (args.existing) {\n      return new StatefulSetPatch(name, {\n        ...args,\n        name: output(args.existing).metadata.name,\n        namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),\n      })\n    }\n\n    return new CreatedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Creates a new stateful set or gets an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the stateful set name. Will not be used when existing stateful set is retrieved.\n   * @param args The arguments to create or get the stateful set with.\n   * @param opts Optional resource options.\n   */\n  static async createOrGet(\n    name: string,\n    args: CreateOrGetStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<StatefulSet> {\n    if (args.existing) {\n      return await StatefulSet.forAsync(args.existing, output(args.namespace).cluster)\n    }\n\n    return new CreatedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Patches an existing stateful set.\n   *\n   * Will throw an error if the stateful set does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the stateful set name.\n   * @param args The arguments to patch the stateful set with.\n   * @param opts Optional resource options.\n   */\n  static patch(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions): StatefulSet {\n    return new StatefulSetPatch(name, args, opts)\n  }\n\n  /**\n   * Wraps an existing Kubernetes stateful set.\n   */\n  static wrap(\n    name: string,\n    args: WrappedStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): StatefulSet {\n    return new WrappedStatefulSet(name, args, opts)\n  }\n\n  /**\n   * Gets an existing stateful set.\n   *\n   * Will throw an error if the stateful set does not exist.\n   */\n  static get(\n    name: string,\n    args: ExternalStatefulSetArgs,\n    opts?: ComponentResourceOptions,\n  ): StatefulSet {\n    return new ExternalStatefulSet(name, args, opts)\n  }\n\n  private static readonly statefulSetCache = new Map<string, StatefulSet>()\n\n  /**\n   * Gets an existing stateful set for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the stateful set for.\n   * @param cluster The cluster where the stateful set is located.\n   */\n  static for(entity: k8s.StatefulSet, cluster: Input<k8s.Cluster>): StatefulSet {\n    return getOrCreate(\n      StatefulSet.statefulSetCache,\n      `${entity.clusterName}.${entity.metadata.namespace}.${entity.metadata.name}.${entity.clusterId}`,\n      name => {\n        return StatefulSet.get(name, {\n          name: entity.metadata.name,\n          namespace: Namespace.forResource(entity, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing stateful set for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the stateful set for.\n   * @param cluster The cluster where the stateful set is located.\n   */\n  static async forAsync(\n    entity: Input<k8s.StatefulSet>,\n    cluster: Input<k8s.Cluster>,\n  ): Promise<StatefulSet> {\n    const resolvedEntity = await toPromise(entity)\n    return StatefulSet.for(resolvedEntity, cluster)\n  }\n\n  protected getTerminalMeta(): Output<UnitTerminal[\"meta\"]> {\n    return output({\n      title: \"StatefulSet\",\n      globalTitle: interpolate`StatefulSet | ${this.metadata.name}`,\n      description: \"The shell inside the stateful set.\",\n      icon: \"devicon:kubernetes\",\n    })\n  }\n\n  protected get resourceType(): string {\n    return \"statefulset\"\n  }\n}\n\nclass CreatedStatefulSet extends StatefulSet {\n  constructor(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions) {\n    const { labels, podTemplate, networkPolicy, containers, service, routes } =\n      getExposableWorkloadComponents(\n        name,\n        {\n          ...args,\n\n          // force create a service since it is required for stateful sets\n          service: output(args.service).apply(service => ({ ...service })),\n        },\n        () => this,\n        opts,\n      )\n\n    const statefulSet = output(args.namespace).cluster.apply(cluster => {\n      return new apps.v1.StatefulSet(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: output({ args, podTemplate, labels, service }).apply(\n            ({ args, podTemplate, labels, service }) => {\n              return deepmerge(\n                {\n                  serviceName: service?.metadata.name,\n                  template: podTemplate,\n                  selector: { matchLabels: labels },\n                },\n                omit(args, exposableWorkloadExtraArgs),\n              ) as types.input.apps.v1.StatefulSetSpec\n            },\n          ),\n        },\n        {\n          ...opts,\n          parent: this,\n          provider: getProvider(cluster),\n        },\n      )\n    })\n\n    super(\n      \"highstate:k8s:StatefulSet\",\n      name,\n      args,\n      opts,\n\n      statefulSet.apiVersion,\n      statefulSet.kind,\n      output(args.terminal ?? {}),\n      containers,\n      output(args.namespace),\n      statefulSet.metadata,\n      networkPolicy,\n\n      service,\n      routes,\n\n      statefulSet.spec,\n      statefulSet.status,\n    )\n  }\n}\n\nclass StatefulSetPatch extends StatefulSet {\n  constructor(name: string, args: StatefulSetArgs, opts?: ComponentResourceOptions) {\n    const { labels, podTemplate, networkPolicy, containers, service, routes } =\n      getExposableWorkloadComponents(name, args, () => this, opts)\n\n    const statefulSet = output(args.namespace).cluster.apply(cluster => {\n      return new apps.v1.StatefulSetPatch(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: output({ args, podTemplate, labels }).apply(({ args, podTemplate, labels }) => {\n            return deepmerge(\n              {\n                template: podTemplate,\n                selector: { matchLabels: labels },\n              },\n              omit(args, exposableWorkloadExtraArgs),\n            ) as types.input.apps.v1.StatefulSetSpec\n          }),\n        },\n        {\n          ...opts,\n          parent: this,\n          provider: getProvider(cluster),\n        },\n      )\n    })\n\n    super(\n      \"highstate:k8s:StatefulSetPatch\",\n      name,\n      args,\n      opts,\n\n      statefulSet.apiVersion,\n      statefulSet.kind,\n      output(args.terminal ?? {}),\n      containers,\n      output(args.namespace),\n      statefulSet.metadata,\n      networkPolicy,\n\n      service,\n      routes,\n\n      statefulSet.spec,\n      statefulSet.status,\n    )\n  }\n}\n\nexport type WrappedStatefulSetArgs = {\n  /**\n   * The underlying Kubernetes stateful set to wrap.\n   */\n  statefulSet: Input<apps.v1.StatefulSet>\n\n  // TODO: remove\n  service?: Input<Service>\n\n  /**\n   * The namespace where the stateful set is located.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The args for the terminal to use.\n   */\n  terminal?: Input<WorkloadTerminalArgs>\n}\n\nclass WrappedStatefulSet extends StatefulSet {\n  constructor(name: string, args: WrappedStatefulSetArgs, opts?: ComponentResourceOptions) {\n    super(\n      \"highstate:k8s:WrappedStatefulSet\",\n      name,\n      args,\n      opts,\n\n      output(args.statefulSet).apiVersion,\n      output(args.statefulSet).kind,\n      output(args.terminal ?? {}),\n      output([]),\n      output(args.namespace),\n      output(args.statefulSet).metadata,\n\n      output(undefined),\n      output(args.service),\n      output([]),\n\n      output(args.statefulSet).spec,\n      output(args.statefulSet).status,\n    )\n  }\n}\n\nexport type ExternalStatefulSetArgs = {\n  /**\n   * The name of the stateful set to get.\n   */\n  name: Input<string>\n\n  /**\n   * The namespace where the stateful set is located.\n   */\n  namespace: Input<Namespace>\n}\n\nclass ExternalStatefulSet extends StatefulSet {\n  constructor(name: string, args: ExternalStatefulSetArgs, opts?: ComponentResourceOptions) {\n    const statefulSet = output(args.namespace).cluster.apply(cluster => {\n      return apps.v1.StatefulSet.get(\n        name,\n        interpolate`${output(args.namespace).metadata.name}/${args.name}`,\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:ExternalStatefulSet\",\n      name,\n      args,\n      opts,\n\n      statefulSet.apiVersion,\n      statefulSet.kind,\n      output({}),\n      output([]),\n      output(args.namespace),\n      statefulSet.metadata,\n\n      output(undefined),\n      output(undefined),\n      output([]),\n\n      statefulSet.spec,\n      statefulSet.status,\n    )\n  }\n}\n"]}

package/dist/deployment-PFT7TA2J.js

@@ -0,0 +1,8 @@
+export { Deployment } from './chunk-DEAM6QOQ.js';
+import './chunk-STPKTYD6.js';
+import './chunk-DJE2YX64.js';
+import './chunk-LR6OTL6T.js';
+import './chunk-UHWJ2GDK.js';
+import './chunk-PZ5AY32C.js';
+//# sourceMappingURL=deployment-PFT7TA2J.js.map
+//# sourceMappingURL=deployment-PFT7TA2J.js.map

package/dist/{deployment-D3ZXIZRN.js.map → deployment-PFT7TA2J.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"deployment-D3ZXIZRN.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"deployment-PFT7TA2J.js"}

package/dist/highstate.manifest.json

@@ -8,7 +8,7 @@
     "./dist/units/existing-cluster/index.js": 2212294583,
     "./dist/units/gateway-api/index.js": 2212294583,
     "./dist/units/reduced-access-cluster/index.js": 2212294583,
-    "./dist/impl/gateway-route.js": 685074589,
-    "./dist/impl/tls-certificate.js": 612255108
+    "./dist/impl/gateway-route.js": 1516064506,
+    "./dist/impl/tls-certificate.js": 1739030601
   }
 }

package/dist/impl/gateway-route.js

@@ -1,8 +1,8 @@
-import { Gateway, HttpRoute, TcpRoute, UdpRoute } from '../chunk-OEOMZP2C.js';
-import { Certificate } from '../chunk-2F2IID7N.js';
-import { Service, l4EndpointToServicePort } from '../chunk-SI7X6N46.js';
-import '../chunk-VMEJWYK2.js';
-import { Namespace, mapMetadata, getProvider } from '../chunk-WGMJCZSK.js';
+import { Gateway, HttpRoute, TcpRoute, UdpRoute } from '../chunk-Q35R54GK.js';
+import { Certificate } from '../chunk-77AY36LR.js';
+import { Service, l4EndpointToServicePort } from '../chunk-DJE2YX64.js';
+import '../chunk-LR6OTL6T.js';
+import { Namespace, mapMetadata, getProvider } from '../chunk-UHWJ2GDK.js';
 import '../chunk-PZ5AY32C.js';
 import { gatewayRouteMediator, filterEndpoints } from '@highstate/common';
 import { k8s } from '@highstate/library';

package/dist/impl/tls-certificate.js

@@ -1,6 +1,6 @@
-import { Certificate } from '../chunk-2F2IID7N.js';
-import '../chunk-VMEJWYK2.js';
-import { getProvider, Namespace } from '../chunk-WGMJCZSK.js';
+import { Certificate } from '../chunk-77AY36LR.js';
+import '../chunk-LR6OTL6T.js';
+import { getProvider, Namespace } from '../chunk-UHWJ2GDK.js';
 import '../chunk-PZ5AY32C.js';
 import { tlsCertificateMediator } from '@highstate/common';
 import { k8s } from '@highstate/library';

package/dist/index.js

@@ -1,18 +1,18 @@
-export { Gateway, HttpRoute, TcpRoute, UdpRoute, mapHttpRouteRuleMatch, resolveBackendRef } from './chunk-OEOMZP2C.js';
-export { Certificate } from './chunk-2F2IID7N.js';
-export { Chart, RenderedChart, getChartService, getChartServiceOutput, resolveHelmChart } from './chunk-2ZAEILVT.js';
+export { Gateway, HttpRoute, TcpRoute, UdpRoute, mapHttpRouteRuleMatch, resolveBackendRef } from './chunk-Q35R54GK.js';
+export { Certificate } from './chunk-77AY36LR.js';
+export { Chart, RenderedChart, getChartService, getChartServiceOutput, resolveHelmChart } from './chunk-IRGMGQGG.js';
 export { dns01SolverMediator } from './chunk-HH2JJELM.js';
-import { ClusterAccessScope } from './chunk-FKJLPM3M.js';
-export { ClusterAccessScope } from './chunk-FKJLPM3M.js';
-export { Deployment } from './chunk-3DFFUGSJ.js';
-export { StatefulSet } from './chunk-XU6ZPTWO.js';
-import { Workload, getWorkloadComponents, ConfigMap } from './chunk-IDKGFFZ7.js';
-export { ConfigMap, ExposableWorkload, NativeNetworkPolicy, NetworkPolicy, PersistentVolumeClaim, Workload, exposableWorkloadExtraArgs, getAutoVolumeName, getBestEndpoint, getExposableWorkloadComponents, getFallbackContainerName, getWorkloadComponents, getWorkloadVolumeResourceUuid, mapContainerEnvironment, mapContainerToRaw, mapEnvironmentSource, mapVolumeMount, mapWorkloadVolume, networkPolicyMediator, podSpecDefaults, requireBestEndpoint, workloadExtraArgs } from './chunk-IDKGFFZ7.js';
-export { Service, getServiceType, isEndpointFromCluster, l4EndpointToServicePort, mapContainerPortToServicePort, mapServiceToLabelSelector } from './chunk-SI7X6N46.js';
-export { Secret } from './chunk-VMEJWYK2.js';
-export { createK8sTerminal, detectExternalIps } from './chunk-O3ZNJMTN.js';
-import { commonExtraArgs, Namespace, mapMetadata, getProvider, images_exports } from './chunk-WGMJCZSK.js';
-export { Namespace, ScopedResource, commonExtraArgs, getNamespaceName, getProvider, getProviderAsync, images_exports as images, mapMetadata, mapNamespaceNameToSelector, mapSelectorLikeToSelector, validateCluster } from './chunk-WGMJCZSK.js';
+import { ClusterAccessScope } from './chunk-SY7FPT77.js';
+export { ClusterAccessScope } from './chunk-SY7FPT77.js';
+export { Deployment } from './chunk-DEAM6QOQ.js';
+export { StatefulSet } from './chunk-YY7RUC3G.js';
+import { Workload, getWorkloadComponents, ConfigMap } from './chunk-STPKTYD6.js';
+export { ConfigMap, ExposableWorkload, NativeNetworkPolicy, NetworkPolicy, PersistentVolumeClaim, Workload, exposableWorkloadExtraArgs, getAutoVolumeName, getBestEndpoint, getExposableWorkloadComponents, getFallbackContainerName, getWorkloadComponents, getWorkloadVolumeResourceUuid, mapContainerEnvironment, mapContainerToRaw, mapEnvironmentSource, mapVolumeMount, mapWorkloadVolume, networkPolicyMediator, podSpecDefaults, requireBestEndpoint, workloadExtraArgs } from './chunk-STPKTYD6.js';
+export { Service, getServiceType, isEndpointFromCluster, l4EndpointToServicePort, mapContainerPortToServicePort, mapServiceToLabelSelector } from './chunk-DJE2YX64.js';
+export { Secret } from './chunk-LR6OTL6T.js';
+export { createK8sTerminal, detectExternalIps } from './chunk-5CMNORLF.js';
+import { commonExtraArgs, Namespace, mapMetadata, getProvider, images_exports } from './chunk-UHWJ2GDK.js';
+export { Namespace, ScopedResource, commonExtraArgs, getNamespaceName, getProvider, getProviderAsync, images_exports as images, mapMetadata, mapNamespaceNameToSelector, mapSelectorLikeToSelector, validateCluster } from './chunk-UHWJ2GDK.js';
 import './chunk-PZ5AY32C.js';
 import { getOrCreate, text, trimIndentation } from '@highstate/contract';
 import { output, interpolate, toPromise, normalize } from '@highstate/pulumi';
@@ -918,7 +918,7 @@ async function createMonitorWorker(namespace, resources) {
   });
   return output$1({
     name: "monitor",
-    image: images_exports["worker-k8s-monitor"].image,
+    image: images_exports["worker.k8s-monitor"].image,
     params: {
       kubeconfig: scope.cluster.kubeconfig,
       resources: output$1(resources).apply((resources2) => resources2.map((r) => r.entity))